This vulnerability (CVE-2024-3382) in Palo Alto Networks PAN-OS software is a resource exhaustion issue classified under CWE-770 (Allocation of Resources Without Limits or Throttling). Specifically, a memory leak occurs when an attacker sends a burst of specially crafted packets through the firewall, which eventually prevents the PA-5400 Series device from processing further traffic. The vulnerability only affects devices running PAN-OS versions 10.2.0, 11.0.0, and 11.1.0 with the SSL Forward Proxy feature enabled. The CVSS v3.1 base score is 7.5, indicating high severity due to network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability (denial of service). As of the published date, no patch or official remediation level has been announced by Palo Alto Networks.

Successful exploitation results in a denial of service condition by exhausting memory resources on affected PA-5400 Series devices running vulnerable PAN-OS versions with SSL Forward Proxy enabled. This prevents the firewall from processing legitimate traffic, potentially disrupting network operations. There is no impact on confidentiality or integrity reported. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should consider disabling the SSL Forward Proxy feature on affected PA-5400 Series devices if feasible, to mitigate exposure. Monitor vendor communications closely for updates and apply patches promptly once available.