topic Re: Is there security advisory information for CVE-2021-3449 (openssl) in General Topics

Is there security advisory information for CVE-2021-3449 (openssl)

NormSil — Tue, 13 Apr 2021 15:00:51 GMT

There is github POC for openssl CVE-2021-3449.

is there any information or security advisory about it?

thanks

Re: Is there security advisory information for CVE-2021-3449 (openssl)

LAYER_8 — Tue, 13 Apr 2021 19:17:57 GMT

Indeed, Palo already categorized it. If you are pulling up to date dynamic updates, then your network is protected. See below screenshot.

To access our threat database, log in to your customer support portal, scroll down to the bottom and click the resources dropdown, and click threat DB to access more info.

Re: Is there security advisory information for CVE-2021-3449 (openssl)

BPry — Wed, 14 Apr 2021 02:17:17 GMT

@NormSil,

If you were wondering about potential device impact since PAN uses OpenSSL in PAN-OS this isn't generally something they'll put any information out prior to it being patched, if it has any impact at all. You can subscribe to any security advisories that PAN releases through HERE, at this point no information is being publicly released.