CVE-2021-3038

A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted input to the GlobalProtect app that results in a Windows blue screen of death (BSOD) error. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.8; GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.4.

Score

CVSS 3.1 5.5 Medium

Status

Modified - psirt@paloaltonetworks.com

Published

2021-04-20

Last modified

2024-09-16

Weaknesses

CWE-20, CWE-248

Affected products

• Globalprotect App (Palo Alto Networks)
• Globalprotect (Paloaltonetworks)

References

• https://security.paloaltonetworks.com/CVE-2021-3038