BugZero | Palo Alto Networks BugID PAN-305480 - Fixed an issue where the pan

BugZero | Palo Alto Networks BugID PAN-305480 - Fixed an issue where the pan_task process stopped ...

Palo Alto Networks - Defect ID: PAN-305480

Fixed an issue where the pan_task process stopped responding while processing DoH JSON format traffic with DoH Security enabled, which caused missing cross-packet bytes in the decoded DNS query type field, and the dataplane went down.

Palo Alto Networks - Defect ID: PAN-305480

Fixed an issue where the pan_task process stopped responding while processing DoH JSON format traffic with DoH Security enabled, which caused missing cross-packet bytes in the decoded DNS query type field, and the dataplane went down.

Last updated on March 31st, 2026

BugZero Risk Score
6.3 Medium

Overall: 6.3

Severity: 6.4

Community: 3.7

Lifecycle: 10.0

What is the BugZero Risk Score?

Palo Alto Networks Integration

Learn more about where this data comes from

Palo Alto Networks Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Bug Details

Views: 1

Description

The earliest recollection of this bug is traced back to PAN-OS 11.1.13 - March 31, 2026. This bug is fixed in PAN-OS versions 11.2.10-h1, 11.2.7-h7, 12.1.4, 11.1.13. Fixed an issue where the pan_task process stopped responding while processing DoH JSON format traffic with DoH Security enabled, which caused missing cross-packet bytes in the decoded DNS query type field, and the dataplane went down. For more information: https://docs.paloaltonetworks.com/ngfw/release-notes/12-1/pan-os-12-1-4-known-and-addressed-issues/pan-os-12-1-4-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-13-known-and-addressed-issues/pan-os-11-1-13-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-10-known-and-addressed-issues/pan-os-11-2-10-h1-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-7-known-and-addressed-issues/pan-os-11-2-7-h7-addressed-issues

Change history

2026-03-31 Added: 11.2.10-h1, 12.1.4, 11.1.13

2026-03-31 Removed: 12.1.3-h3

2026-03-24 Added: 11.1.13, 11.2.10-h1, 12.1.4

2026-03-24 Added: 12.1.4, 11.2.10-h1, 11.1.13

2026-03-24 Removed: 11.2.7-h7, 12.1.3-h3

2026-03-16 Added: 11.1.13, 12.1.4

2026-03-16 Removed: 11.2.7-h7, 12.1.3-h3

2026-03-12 Added: 11.1.13, 11.2.10-h1, 12.1.4

2026-03-12 Removed: 12.1.3-h3

2026-03-11 Added: 11.2.10-h1, 12.1.4, 11.1.13

2026-03-11 Removed: 11.2.7-h7, 12.1.3-h3

2026-02-12 Added: 12.1.4, 11.1.13, 11.2.10-h1

2026-02-12 Removed: 12.1.3-h3

2026-02-06 Added: 11.2.10-h1, 11.1.13

2026-02-06 Removed: 12.1.3-h3

2026-02-04 Added: 11.2.10-h1, 12.1.4, 11.1.13

2026-01-30 Added: 11.1.13, 12.1.4, 11.2.10-h1

2025-12-02 Added: 12.1.4, 11.2.10-h1, 11.1.13

2025-12-02 Removed: 12.1.3-h3

2025-12-01 Added: 11.1.13, 12.1.4, 11.2.10-h1

2025-12-01 Added: 12.1.4, 11.1.13, 11.2.10-h1

2025-12-01 Added: 11.2.10-h1, 12.1.4

2025-12-01 Added: 11.1.13, 11.2.10-h1

2025-12-01 Removed: 12.1.3-h3

2025-10-22 Added: 11.1.13, 11.2.10-h1

2025-10-22 Added: 11.2.7-h7, 12.1.3-h3

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 11.2.10-h1, 11.2.7-h7, 12.1.4, 11.1.13

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 11.2.10-h1, 11.2.7-h7, 12.1.4, 11.1.13

Top Palo Alto Networks Defects

6.3Defect ID: PAN-306533
Fixed an issue where system logging for NTP events was delayed by approximately 15 minutes.
6.3Defect ID: PAN-310240
Fixed an issue where software packet buffers were completely utilized when performing a Data Loss Prevention longevity test.
6.3Defect ID: PAN-305919
Fixed an issue where exporting an ML-DSA certificate with PKCS12 resulted in an error file with the message failed to process command .
6.3Defect ID: PAN-290757
Fixed an issue where the user, region, and external IP address were reported as unknown in the AppSec logs due to an incorrect packet adjust logic.
6.3Defect ID: PAN-305480
Fixed an issue where the pan_task process stopped responding while processing DoH JSON format traffic with DoH Security enabled, which caused missing cross-packet bytes in the decoded DNS query type field, and the dataplane went down.

Ready to prevent the next vendor outage?

Get a demo

Palo Alto Networks - Defect ID: PAN-305480

Fixed an issue where the pan_task process stopped responding while processing DoH JSON format traffic with DoH Security enabled, which caused missing cross-packet bytes in the decoded DNS query type field, and the dataplane went down.

Palo Alto Networks - Defect ID: PAN-305480

Fixed an issue where the pan_task process stopped responding while processing DoH JSON format traffic with DoH Security enabled, which caused missing cross-packet bytes in the decoded DNS query type field, and the dataplane went down.

Last updated on March 31st, 2026

BugZero Risk Score6.3 Medium

Bug Details

Top Palo Alto Networks Defects

Ready to prevent the next vendor outage?

Links

BugZero Risk Score
6.3 Medium