title: GlobalProtect on MacOS: Local denial-of-service (DoS) vulnerability.
description: A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect software running on Mac OS allows authenticated local users to cause the Mac OS kernel to hang or crash. This issue affects GlobalProtect 5.0.5 and earlier versions of GlobalProtect 5.0 on Mac OS.
problem types: CWE-642 External Control of Critical State Data
affected:
{
platforms: Mac OS
product: GlobalProtect
vendor: Palo Alto Networks
versions:
changes: [at: 5.0.6, status: unaffected], lessThanOrEqual: 5.0.5, status: affected, version: 5.0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
]
solutions: This issue is fixed in GlobalProtect 5.0.6, GlobalProtect 5.1.0, and all later versions.