{"id":24284665,"url":"https://github.com/waived/cve-2024-3393","last_synced_at":"2025-07-13T19:07:31.207Z","repository":{"id":271792479,"uuid":"914582236","full_name":"waived/CVE-2024-3393","owner":"waived","description":"PAN-OS: Firewall Denial-of-Service exploit via malicious DNS query","archived":false,"fork":false,"pushed_at":"2025-01-09T22:05:18.000Z","size":109,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-03-05T17:19:06.638Z","etag":null,"topics":["cve-2024-3393","denial-of-service","dns-attack","exploit","palo-alto-networks","pan-os","proof-of-concept","python3"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/waived.png","metadata":{"files":{"readme":"README.txt","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2025-01-09T22:03:07.000Z","updated_at":"2025-01-15T11:48:19.000Z","dependencies_parsed_at":"2025-01-10T11:17:13.505Z","dependency_job_id":null,"html_url":"https://github.com/waived/CVE-2024-3393","commit_stats":null,"previous_names":["waived/cve-2024-3393"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/waived/CVE-2024-3393","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/waived%2FCVE-2024-3393","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/waived%2FCVE-2024-3393/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/waived%2FCVE-2024-3393/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/waived%2FCVE-2024-3393/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/waived","download_url":"https://codeload.github.com/waived/CVE-2024-3393/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/waived%2FCVE-2024-3393/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":265191105,"owners_count":23725262,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cve-2024-3393","denial-of-service","dns-attack","exploit","palo-alto-networks","pan-os","proof-of-concept","python3"],"created_at":"2025-01-16T05:19:26.589Z","updated_at":"2025-07-13T19:07:31.024Z","avatar_url":"https://github.com/waived.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"\n     ////////////////////////////////////////\n    /// CVE-2024-3393 - PROOF-OF-CONCEPT ///\n   ///  Palo-Alto Firewall DoS Exploit  ///\n  ////////////////////////////////////////\n\nDescription:\n    Simple POC (proof of concept) script that aims to attack\n    the Firewall on certain vulnerable versions of Palo Alto's\n    PAN OS via malicious DNS queries. A successful attack will\n    force the firewall to crash and enter \"maintenance mode.\"\n    \n    Although a single malicious DNS request can cause the fire-\n    wall to crash, a second or more requests may be required in\n    order for this attack to be successful. This POC will send\n    a user-specified volley of packets in order to acount for this.\n\nResources:\n    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-3393\n    - https://security.paloaltonetworks.com/CVE-2024-3393\n    - https://nvd.nist.gov/vuln/detail/CVE-2024-3393\n    \nRisk Assessment:\n┌───────────────┬──────────────────────┬──────────────────────┐\n│ VERSIONS      │ AFFECTED             | SAFE                 │\n├───────────────┼──────────────────────┼──────────────────────┤\n│ Cloud NGFW    │ None                 │ All                  │\n├───────────────┼──────────────────────┼──────────────────────┤\n│ PAN-OS 11.2   │ \u003c11.2.3              │ \u003e=11.2.3*            │\n├───────────────┼──────────────────────┼──────────────────────┤\n│ PAN-OS 11.1   │ \u003c11.1.5              │ \u003e=11.1.5*            │\n├───────────────┼──────────────────────┼──────────────────────┤\n│ PAN-OS 10.2   │ \u003e=10.2.8*, \u003c10.2.14  │ \u003c10.2.8*, \u003e=10.2.14* │\n├───────────────┼──────────────────────┼──────────────────────┤\n│ PAN-OS 10.1   │ \u003e=10.1.14*, \u003c10.1.15 │ \u003c10.1.14*, \u003e=10.1.15 │\n├───────────────┼──────────────────────┼──────────────────────┤\n│ PAN-OS 10.0   │ None                 │ All                  │\n├───────────────┼──────────────────────┼──────────────────────┤\n│ PAN-OS 9.1    │ None                 │ All                  │\n├───────────────┼──────────────────────┼──────────────────────┤\n│ Prisma Access │ \u003e=10.2.8, \u003c11.2.3    │ \u003c10.2.8*, \u003e=11.2.3   │\n└───────────────┴──────────────────────┴──────────────────────┘\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwaived%2Fcve-2024-3393","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fwaived%2Fcve-2024-3393","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fwaived%2Fcve-2024-3393/lists"}