BugZero | Palo Alto Networks BugID PAN-306534 - Fixed an issue were the all

BugZero | Palo Alto Networks BugID PAN-306534 - Fixed an issue were the all_task process repeatedl...

Palo Alto Networks - Defect ID: PAN-306534

Fixed an issue were the all_task process repeatedly restarted due to memory pool corruption when processing fragmented DNS over HTTPs (DoH) JSON queries. This occurred due to incorrect buffer length calculations during memory deallocation when the query name field spanned multiple packets.

Palo Alto Networks - Defect ID: PAN-306534

Fixed an issue were the all_task process repeatedly restarted due to memory pool corruption when processing fragmented DNS over HTTPs (DoH) JSON queries. This occurred due to incorrect buffer length calculations during memory deallocation when the query name field spanned multiple packets.

Last updated on May 15th, 2026

BugZero Risk Score
6.3 Medium

Overall: 6.3

Severity: 6.4

Community: 3.7

Lifecycle: 10.0

What is the BugZero Risk Score?

Palo Alto Networks Integration

Learn more about where this data comes from

Palo Alto Networks Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Bug Details

Description

The earliest recollection of this bug is traced back to PAN-OS 11.1.13 - May 15, 2026. This bug is fixed in PAN-OS versions 11.1.13, 11.2.10-h1, 11.2.7-h7. Fixed an issue were the all_task process repeatedly restarted due to memory pool corruption when processing fragmented DNS over HTTPs (DoH) JSON queries. This occurred due to incorrect buffer length calculations during memory deallocation when the query name field spanned multiple packets. For more information: https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-release-notes/pan-os-11-1-13-known-and-addressed-issues/pan-os-11-1-13-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-10-known-and-addressed-issues/pan-os-11-2-10-h1-addressed-issues https://docs.paloaltonetworks.com/pan-os/11-2/pan-os-release-notes/pan-os-11-2-7-known-and-addressed-issues/pan-os-11-2-7-h7-addressed-issues

Change history

2026-05-15 Added: 11.1.13, 11.2.10-h1

2026-05-15 Removed: 12.1.3-h3

2026-05-13 Added: 11.2.10-h1, 11.1.13

2026-04-14 Added: 11.2.10-h1, 11.1.13

2026-04-14 Removed: 12.1.3-h3

2026-03-31 Added: 11.2.10-h1, 11.1.13

2026-03-31 Removed: 12.1.3-h3

2026-03-24 Added: 11.2.10-h1, 11.1.13

2026-03-24 Removed: 11.2.7-h7, 12.1.3-h3

2026-03-24 Added: 11.2.10-h1, 11.1.13

2026-03-24 Added: 11.1.13

2026-03-24 Removed: 11.2.7-h7, 12.1.3-h3

2026-03-12 Added: 11.1.13, 11.2.10-h1

2026-03-12 Removed: 12.1.3-h3

2026-03-11 Added: 11.2.10-h1, 11.1.13

2026-03-11 Removed: 11.2.7-h7, 12.1.3-h3

2026-02-12 Added: 11.1.13, 11.2.10-h1

2026-02-12 Removed: 12.1.3-h3

2026-02-06 Added: 11.2.10-h1, 11.1.13

2026-02-06 Removed: 12.1.3-h3

2026-02-04 Added: 11.2.10-h1, 11.1.13

2026-01-30 Added: 11.1.13, 11.2.10-h1

2025-12-02 Added: 11.2.10-h1, 11.1.13

2025-12-02 Removed: 12.1.3-h3

2025-12-01 Added: 11.2.10-h1, 11.1.13

2025-12-01 Added: 11.1.13, 11.2.10-h1

2025-12-01 Added: 11.2.10-h1

2025-12-01 Added: 11.1.13, 11.2.10-h1

2025-12-01 Removed: 12.1.3-h3

2025-10-22 Added: 11.1.13, 11.2.10-h1

2025-10-22 Added: 11.2.7-h7, 12.1.3-h3

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 11.1.13, 11.2.10-h1, 11.2.7-h7

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 11.1.13, 11.2.10-h1, 11.2.7-h7

Top Palo Alto Networks Defects

6.3Defect ID: PAN-314201
Fixed an issue on PAN-OS 12.1 releases where intermittent traffic drops occurred over IPSec VPN tunnels to third-party firewalls during the IPSec rekey due to the firewall failing to inform the peer to delete the old SA after moving to the new one.
6.3Defect ID: PAN-307702
( Firewalls in HA configurations only ) Fixed an issue where traffic passing through AE layer 2 interfaces was interrupted during HA failovers.
6.3Defect ID: PAN-283053
Fixed an issue where the firewall experienced high disk space utilization, which caused the firewall to become non-functional.
6.3Defect ID: PAN-313572
( VM-Series firewalls only ) Fixed an issue where the dataplane restarted due to a segmentation fault.
6.3Defect ID: PAN-306534
Fixed an issue were the all_task process repeatedly restarted due to memory pool corruption when processing fragmented DNS over HTTPs (DoH) JSON queries. This occurred due to incorrect buffer length calculations during memory deallocation when the query name field spanned multiple packets.

Ready to prevent the next vendor outage?

Get a demo

Palo Alto Networks - Defect ID: PAN-306534

Fixed an issue were the all_task process repeatedly restarted due to memory pool corruption when processing fragmented DNS over HTTPs (DoH) JSON queries. This occurred due to incorrect buffer length calculations during memory deallocation when the query name field spanned multiple packets.

Palo Alto Networks - Defect ID: PAN-306534

Fixed an issue were the all_task process repeatedly restarted due to memory pool corruption when processing fragmented DNS over HTTPs (DoH) JSON queries. This occurred due to incorrect buffer length calculations during memory deallocation when the query name field spanned multiple packets.

Last updated on May 15th, 2026

BugZero Risk Score6.3 Medium

Bug Details

Top Palo Alto Networks Defects

Ready to prevent the next vendor outage?

Links

BugZero Risk Score
6.3 Medium