CVE-2020-1992 PAN-OS on PA-7000 Series: Varrcvr daemon network-based denial of service or privilege escalation

High 8.1 Published 8 Apr 2020 Updated 17 Sep 2024

Remote attackers can crash the Varrcvr daemon or execute code with root privileges on PA-7000 firewalls with Log Forwarding Cards.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-1992?

CVE-2020-1992 is a high-severity vulnerability in Paloaltonetworks Pan-Os, published on 8 Apr 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A format string vulnerability in the Varrcvr daemon of PAN-OS on PA-7000 Series devices with a Log Forwarding Card (LFC) allows remote attackers to crash the daemon creating a denial of service condition or potentially execute code with root privileges. This issue affects Palo Alto Networks PAN-OS 9.0 versions before 9.0.7; PAN-OS 9.1 versions before 9.1.2 on PA-7000 Series devices with an LFC installed and configured. This issue requires WildFire services to be configured and enabled. This issue does not affect PAN-OS 8.1 and earlier releases. This issue does not affect any other PA Series firewalls.

Weakness: CWE-134

Which versions are affected by CVE-2020-1992?

It affects 1 product.

Products include Paloaltonetworks Pan-Os.

How do I fix CVE-2020-1992?

No fix has been published for CVE-2020-1992 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-1992 being exploited?

There is no known exploitation of CVE-2020-1992 in the wild and no public exploit code.

All Paloaltonetworks Pan-Os vulnerabilities

Sources

Also known as GHSA-rpm3-9x65-q856.