Design/Logic Flaw

2020-12-2415:15:00

PRIOn knowledge base

www.prio-n.com

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

JSON

In version 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2 of BIG-IP DNS, GTM, and Link Controller, zxfrd leaks memory when listing DNS zones. Zones can be listed via TMSH, iControl or SNMP; only users with access to those services can trigger this vulnerability.

CPENameOperatorVersion
big-ip_domain_name_systemge12.1.0
big-ip_domain_name_systemle12.1.5
big-ip_domain_name_systemge11.6.1
big-ip_domain_name_systemle11.6.5
big-ip_domain_name_systemge15.0.0
big-ip_domain_name_systemlt15.1.1
big-ip_domain_name_systemge13.1.0
big-ip_domain_name_systemlt13.1.3.5
big-ip_domain_name_systemge14.1.0
big-ip_domain_name_systemlt14.1.3.1

Name	Operator	Version
big-ip_domain_name_system	ge	12.1.0
big-ip_domain_name_system	le	12.1.5
big-ip_domain_name_system	ge	11.6.1
big-ip_domain_name_system	le	11.6.5
big-ip_domain_name_system	ge	15.0.0
big-ip_domain_name_system	lt	15.1.1
big-ip_domain_name_system	ge	13.1.0
big-ip_domain_name_system	lt	13.1.3.5
big-ip_domain_name_system	ge	14.1.0
big-ip_domain_name_system	lt	14.1.3.1

Rows per page:

1-10 of 301

References

support.f5.com/csp/article/K25595031