Code injection

On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, when a SIP ALG profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reache...

Code injection

On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.2, and all versions of 13.1.x, when the IPsec application layer gateway ALG logging profile is configured on an IPsec ALG virtual server, undisclosed IPsec traffic can cause the Traffic Management Microkernel T...

CVE-2022-23025

On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, when a SIP ALG profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reache...

CVE-2022-23025

CVE-2022-23025 affects F5 BIG-IP: SIP ALG profile on a virtual server can cause the Traffic Management Microkernel (TMM) to terminate, resulting in DoS. Affected branches and known vulnerable versions (per F5 advisory): 16.x (vulnerable: 16.1.0; fixed in 16.1.1), 15.x (vulnerable: 15.1.0–15.1.3; ...

CVE-2022-23024

On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.2, and all versions of 13.1.x, when the IPsec application layer gateway ALG logging profile is configured on an IPsec ALG virtual server, undisclosed IPsec traffic can cause the Traffic Management Microkernel T...

CVE-2022-23024

CVE-2022-23024 affects BIG-IP AFM where enabling the IPsec ALG logging profile on an IPsec ALG virtual server can cause TMM termination due to undisclosed IPsec traffic, leading to DoS. Affected versions: 16.x before 16.1.0; 15.1.x before 15.1.4.1; 14.1.x before 14.1.4.2; all 13.1.x (EoTS not eva...

CVE-2022-22175

An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a flowprocessing daemon flowd crash and thereby a Denial of Service DoS. Continued receipt of these specific packets will cause a sustain...

CVE-2022-22178

A Stack-based Buffer Overflow vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networked attacker to cause a flowd crash and thereby a Denial of Service DoS. Continued receipt of these specific packets will cause ...

Design/Logic Flaw

An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a flowprocessing daemon flowd crash and thereby a Denial of Service DoS. Continued receipt of these specific packets will cause a sustain...

CVE-2022-22178 Junos OS: MX and SRX series: Flowd core observed if the SIP ALG is enabled and a specific Session Initiation Protocol (SIP) packet is received

A Stack-based Buffer Overflow vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networked attacker to cause a flowd crash and thereby a Denial of Service DoS. Continued receipt of these specific packets will cause ...

CVE-2022-22175 Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed

An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a flowprocessing daemon flowd crash and thereby a Denial of Service DoS. Continued receipt of these specific packets will cause a sustain...

CVE-2022-22175

The CVE covers an Improper Locking vulnerability in the SIP ALG of Juniper Junos OS on MX Series and SRX Series, causing the flowd daemon to crash and trigger DoS when specific SIP traffic is processed with SIP ALG enabled. Affected versions include Junos OS: 20.4 (before 20.4R3‑S1), 21.1 (before...

F5 Networks BIG-IP : BIG-IP SIP ALG vulnerability (K44110411)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5 / 14.1.4.4 / 15.1.4 / 16.1.1. It is, therefore, affected by a vulnerability as referenced in the K44110411 advisory. - On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all...

CVE-2022-22178

A Stack-based Buffer Overflow vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networked attacker to cause a flowd crash and thereby a Denial of Service DoS. Continued receipt of these specific packets will cause ...

Juniper Junos OS Vulnerability (JSA11284)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11284 advisory. - A Stack-based Buffer Overflow vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networke...

Juniper Junos OS Vulnerability (JSA11281)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11281 advisory. - An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a...

CVE-2021-34790

Multiple vulnerabilities in the Application Level Gateway ALG for the Network Address Translation NAT feature of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized...

CVE-2021-34791

Multiple vulnerabilities in the Application Level Gateway ALG for the Network Address Translation NAT feature of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized...

CVE-2021-34791

Multiple vulnerabilities in the Application Level Gateway ALG for the Network Address Translation NAT feature of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized...

CVE-2021-34791

Cisco ASA and Firepower Threat Defense (FTD) software contain multiple ALG/NAT bypass vulnerabilities (NAT Slipstreaming) due to an incorrect implementation of security checks in the ALG/NAT handling, allowing unauthenticated remote actors to bypass the ALG and open unauthorized connections behin...