Lucene search

Palo_altoCVE-2020-1976

HistoryFeb 12, 2020 - 11:15 p.m.

CVE-2020-1976

2020-02-1223:15:11

CWE-642

CWE-20

palo_alto

web.nvd.nist.gov

cve-2020-1976

palo alto networks

globalprotect

dos

vulnerability

mac os

nvd

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.2

Confidence

High

EPSS

Percentile

5.1%

JSON

A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect software running on Mac OS allows authenticated local users to cause the Mac OS kernel to hang or crash. This issue affects GlobalProtect 5.0.5 and earlier versions of GlobalProtect 5.0 on Mac OS.

Affected configurations

Nvd

Vulners

Node

paloaltonetworksglobalprotectRange5.0–5.0.5macos

VendorProductVersionCPE
paloaltonetworksglobalprotect*cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:macos:*:*

Vendor	Product	Version	CPE
paloaltonetworks	globalprotect	*	cpe:2.3:a:paloaltonetworks:globalprotect::::::macos::*

CNA Affected

[
  {
    "platforms": [
      "Mac OS"
    ],
    "product": "GlobalProtect",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "changes": [
          {
            "at": "5.0.6",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "5.0.5",
        "status": "affected",
        "version": "5.0",
        "versionType": "custom"
      }
    ]
  }
]

References

security.paloaltonetworks.com/CVE-2020-1976

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.2

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2020-1976