CVE-2020-2031: palo alto networks pan-os Integer Underflow (Wrap or Wraparound)

Vulnerability summary

CVE-2020-2031 is a medium (CVSS 6.8) Integer Underflow (Wrap or Wraparound) vulnerability in palo alto networks pan-os. EPSS estimates a 1.14% chance of exploitation in the next 30 days, higher than 66.1% of scored vulnerabilities.

Timeline

1. 08-07-2020
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

An integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface allows authenticated administrators to issue a command from the command line interface that causes the component to stop responding. Repeated attempts to send this request result in denial of service to all PAN-OS services by restarting the device and putting it into maintenance mode. This issue impacts: PAN-OS 9.1 versions earlier than PAN-OS 9.1.3. This issue does not impact PAN-OS 8.1, PAN-OS 9.0, or Prisma Access services.

• CWE-191Integer Underflow (Wrap or Wraparound)The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.