Vulnerability in PA?

[jesuscano]

Hi,

We just received info about this vulneraability:

https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-001.md

So we would like to know if PA appliances are impacted?

Thanks

[vsys_remo]

Hi @jesuscano 

I have opened a case to ask for this information.

[vsys_remo]

3 hours and this high priority case is still in the support queue ...

[vsys_remo]

The PAN-OS team is curently investigating ... as soon more informations become available I assume PaloAlto will also write an official public statement.

[rkazala]

Plesase let us know if you hear back from support!

[jesuscano]

Please, let me know the response from TAC.

[vsys_remo]

As soon as I receive more information I'll write an update here ...

(This is NOT official: I can not imagine that Paloalto is not affected by this)

[jesuscano]

We will wait until TAC response. Thanks

[RobinClayton]

For Reference.

https://nvd.nist.gov/vuln/detail/CVE-2019-11477

https://nvd.nist.gov/vuln/detail/CVE-2019-11478

https://nvd.nist.gov/vuln/detail/CVE-2019-11479

[jesuscano]

Any update about Palo Alto TAC?