This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] Palo Alto Networks PAN-OS fixes 1 vulnerability
Palo Alto Networks is fixing a vulnerability in PAN-OS. Individual fixed versions by branch [1]: 11.2 PAN-OS: 11.2.2-h2, 11.2.3-h6, 11.2.4-h4, 11.2.5 11.1 PAN-OS: 11.1.2-h18, 11.1.3-h2, 11.1.4-h13, 11.1.6-h1, 11.1.7 10.2 PAN-OS: 10.2.4-h25, 10.2.7-h24, 10.2.8-h21, 10.2.9-h21, 10.2.10-h14, 10.2.11-h12, 10.2.12-h6, 10.2.13-h3 and 10.2.14
An unauthenticated remote attacker can cause a DoS attack by sending a specially crafted packet [1].
The vulnerability is present in product:
- PAN-OS; >=11.2.2, <11.2.2-h2; >=11.2.3, <11.2.3-h6; >=11.2.4, <11.2.4-h4; >=11.1.2, <11.1.2-h18; >=11.1.4, <11.1.4-h13; >=11.1.6, <11.1.6-h1; >=10.2.4, <10.2.4-h25; >=10.2.7, <10.2.7-h24; >=10.2.8, <10.2.8-h21; >=10.2.9, <10.2.9-h21; >=10.2.10, <10.2.10-h14; >=10.2.11, <10.2.11-h12; >=10.2.12, <10.2.12-h6; >=10.2.13, <10.2.13-h3
CVSS: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:Y/R:U/V:C/RE:M/U:Amber
More information:
- CVE-2025-4619 at cve.org, NVD
- CWE-754: Improper Check for Unusual or Exceptional Conditions at cwe.mitre.org
The vulnerability was publicly disclosed 13. 11. 2025.
By CESNET, z.s.p.o. Martin Krajči on 14. 11. 2025.