Lucene search

[email protected]CVE-2009-4420

HistoryDec 24, 2009 - 5:30 p.m.

CVE-2009-4420

2009-12-2417:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2009-4420

buffer overflow

f5 networks

big-ip

asm

psm

denial of service

7.7 High

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.038 Low

EPSS

Percentile

91.9%

JSON

Buffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager (ASM) 9.4.4 through 9.4.7 and 10.0.0 through 10.0.1, and Protocol Security Manager (PSM) 9.4.5 through 9.4.7 and 10.0.0 through 10.0.1, allows remote attackers to cause a denial of service (crash) via unknown vectors. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
f5:big-ip_application_security_managerf5 big-ip application security managereq9.4.7
f5:big-ip_application_security_managerf5 big-ip application security managereq9.4.6
f5:big-ip_application_security_managerf5 big-ip application security managereq10.0.1
f5:big-ip_application_security_managerf5 big-ip application security managereq9.4.5
f5:big-ip_protocol_security_managerf5 big-ip protocol security managereq9.4.5
f5:big-ip_application_security_managerf5 big-ip application security managereq9.4.4
f5:big-ip_protocol_security_managerf5 big-ip protocol security managereq9.4.6
f5:big-ip_protocol_security_managerf5 big-ip protocol security managereq10.0.1
f5:big-ip_protocol_security_managerf5 big-ip protocol security managereq9.4.7
f5:big-ip_protocol_security_modulef5 big-ip protocol security moduleeq10.0.0

CPE	Name	Operator	Version
f5:big-ip_application_security_manager	f5 big-ip application security manager	eq	9.4.7
f5:big-ip_application_security_manager	f5 big-ip application security manager	eq	9.4.6
f5:big-ip_application_security_manager	f5 big-ip application security manager	eq	10.0.1
f5:big-ip_application_security_manager	f5 big-ip application security manager	eq	9.4.5
f5:big-ip_protocol_security_manager	f5 big-ip protocol security manager	eq	9.4.5
f5:big-ip_application_security_manager	f5 big-ip application security manager	eq	9.4.4
f5:big-ip_protocol_security_manager	f5 big-ip protocol security manager	eq	9.4.6
f5:big-ip_protocol_security_manager	f5 big-ip protocol security manager	eq	10.0.1
f5:big-ip_protocol_security_manager	f5 big-ip protocol security manager	eq	9.4.7
f5:big-ip_protocol_security_module	f5 big-ip protocol security module	eq	10.0.0

Rows per page:

1-10 of 111

References

osvdb.org/61297

secunia.com/advisories/37805

www.securityfocus.com/bid/37452

www.securitytracker.com/id?1023386

www.vupen.com/english/advisories/2009/3627

exchange.xforce.ibmcloud.com/vulnerabilities/55005

support.f5.com/kb/en-us/solutions/public/10000/400/sol10417.html

7.7 High

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.038 Low

EPSS

Percentile

91.9%

JSON

Related for CVE-2009-4420

cvelist1 prion1