CVE-2019-1580

Memory corruption in PAN-OS 7.1.24 and earlier, PAN-OS 8.0.19 and earlier, PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier will allow a remote, unauthenticated user to craft a message to Secure Shell Daemon (SSHD) and corrupt arbitrary memory.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
palo_altoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 83%
VendorProductVersion
paloaltonetworkspan-os
𝑥
≤ 7.1.24
paloaltonetworkspan-os
8.0.0 ≤
𝑥
≤ 8.0.19
paloaltonetworkspan-os
8.1.0 ≤
𝑥
≤ 8.1.9
paloaltonetworkspan-os
9.0.0 ≤
𝑥
≤ 9.0.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://security.paloaltonetworks.com/CVE-2019-1580
https://security.paloaltonetworks.com/CVE-2019-1580