Palo Alto Networks has tied a high-urgency buffer-overflow issue in the PAN-OS User-ID Terminal Server Agent to denial-of-service risk and possible arbitrary code execution, but exposure depends heavily on how the component is deployed.