PAN-SA-2025-0010: Informational Bulletin: No Impact of the Marvin Attack on PAN-OS (Severity: INFORMATIONAL)

Published May 14, 2025

Updated

The Palo Alto Networks Product Security Assurance team has evaluated the applicability of CVEs related to the Marvin attack on PAN-OS. While we did not determine that any of these CVEs have significant impact on our PAN-OS software, some were fixed anyway out of an abundance of caution. You can also review more details about the Marvin attack (https://people.redhat.com/~hkario/marvin/) if helpful.

Affected Software

1 affected component

Palo Alto Networks PAN-OS

Remediation

Mitigation

No workaround or mitigation is available.

Information

These OSS CVEs are fixed in their respective PAN-OS versions.

Event History

May 14, 2025

Advisory Published

via Palo Alto Networks·03:00 PM

Data Sourced

via Palo Alto Networks·03:00 PM

RemedyDescriptionSeverityWeaknessAffected Software

Advisory Published

via Palo Alto Networks·04:00 PM

Frequently Asked Questions

What is the severity of PAN-SA-2025-0010?

The severity of PAN-SA-2025-0010 is classified as low, as it does not have a significant impact on PAN-OS.

How do I fix PAN-SA-2025-0010?

To address PAN-SA-2025-0010, ensure your PAN-OS is updated to the latest version provided by Palo Alto Networks.

What products are affected by PAN-SA-2025-0010?

PAN-SA-2025-0010 affects various versions of the PAN-OS software from Palo Alto Networks.

Does PAN-SA-2025-0010 require immediate action?

While PAN-SA-2025-0010 is low severity, it is advisable to stay updated with relevant patches for secure practices.

What is the main issue discussed in PAN-SA-2025-0010?

PAN-SA-2025-0010 evaluates the applicability of CVEs related to the Marvin attack on PAN-OS.