CVE-2026-0317: PAN-OS: Denial of Service Vulnerability
CVE-2026-0317
Summary
A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service (DoS) condition. Repeated attempts to trigger this condition result in the Panorama entering maintenance mode.
Cloud NGFW, Prisma® Access, and standalone PAN-OS firewalls are not affected by this vulnerability.
Products covered
Cloud NGFW
PAN-OS
Prisma Access
PAN-OS 12.2
PAN-OS 12.1
PAN-OS 11.2
PAN-OS 11.1
Remediation
Version | Minor Version | Suggested Solution |
|---|---|---|
Cloud NGFW | No action needed. | |
PAN-OS 12.2 | 12.2.0 through 12.2.3 | Upgrade to 12.2.4 or later. |
PAN-OS 12.1 | 12.1.8 through 12.1.10-h* | Upgrade to 12.1.10-h2 or later. |
12.1.5 through 12.1.7-h* | Upgrade to 12.1.7-h8 or 12.1.10-h2 or later. | |
12.1.2 through 12.1.4-h* | Upgrade to 12.1.4-h12 or 12.1.10-h2 or later. | |
PAN-OS 11.2 | 11.2.14 through 11.2.14-h* | Upgrade to 11.2.15 or later. |
11.2.11 through 11.2.13-h* | Upgrade to 11.2.13-h3 or 11.2.15 or later. | |
11.2.8 through 11.2.10-h* | Upgrade to 11.2.10-h15 or 11.2.15 or later. | |
11.2.5 through 11.2.7-h* | Upgrade to 11.2.7-h21 or 11.2.15 or later. | |
11.2.0 through 11.2.4-h* | Upgrade to 11.2.4-h22 or 11.2.15 or later. | |
PAN-OS 11.1 | 11.1.14 through 11.1.16-h* | Upgrade to 11.1.16-h3 or later. |
11.1.11 through 11.1.13-h* | Upgrade to 11.1.13-h15 or 11.1.16-h3 or later. | |
11.1.8 through 11.1.10-h* | Upgrade to 11.1.10-h35 or 11.1.16-h3 or later. | |
11.1.7 through 11.1.7-h* | Upgrade to 11.1.7-h11 or 11.1.16-h3 or later. | |
11.1.5 through 11.1.6-h* | Upgrade to 11.1.6-h39 or 11.1.16-h3 or later. | |
11.1.0 through 11.1.4-h* | Upgrade to 11.1.4-h37 or 11.1.16-h3 or later. | |
All older unsupported PAN-OS versions | Upgrade to a supported fixed version. | |
Prisma Access | No action needed. |
Vendor-listed fixes
Cloud NGFW All
PAN-OS 12.2 >= 12.2.4 on Panorama
PAN-OS 12.1 >= 12.1.4-h12 on Panorama, >= 12.1.7-h8 on Panorama, >= 12.1.10-h2 on Panorama
PAN-OS 11.2 >= 11.2.4-h22 on Panorama, >= 11.2.7-h21 on Panorama, >= 11.2.10-h15 on Panorama, >= 11.2.13-h3 on Panorama, >= 11.2.15 on Panorama
PAN-OS 11.1 >= 11.1.4-h37 on Panorama, >= 11.1.6-h39 on Panorama, >= 11.1.7-h11 on Panorama, >= 11.1.10-h35 on Panorama, >= 11.1.13-h15 on Panorama, >= 11.1.16-h3 on Panora
Prisma Access All
CVEs in this advisory 1
Updates
- Published by Palo Alto Networks
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.