CVE-2019-1580

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-08-23 · updated 2026-06-17
Weakness: CWE-787

Description

Memory corruption in PAN-OS 7.1.24 and earlier, PAN-OS 8.0.19 and earlier, PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier will allow a remote, unauthenticated user to craft a message to Secure Shell Daemon (SSHD) and corrupt arbitrary memory.

Affected products

Palo Alto Networks PAN-OS: through 7.1.24; from 8.0.0 through 8.0.19; from 8.1.0 through 8.1.9; from 9.0.0 through 9.0.3
Palo Alto Networks PAN-OS: PAN-OS 7.1.24 and earlier, PAN-OS 8.0.19 and earlier, PAN-OS 8.1.9 and earlier, and PAN-OS 9.0.3 and earlier.

References

https://security.paloaltonetworks.com/CVE-2019-1580
https://security.paloaltonetworks.com/CVE-2019-1580

Get alerted when CVE-2019-1580 or the next vulnerability affects your stack