CVE-2022-27806

CVE-2022-27806 affects BIG-IP Guided Configuration in Appliance mode. An authenticated Administrator can bypass Appliance mode restrictions by exploiting command injection in undisclosed Guided Configuration URIs. Vulnerable are BIG-IP versions 11.6.x, 12.1.x, 13.1.x, 14.1.x, 15.1.x, and 16.1.x (...

CVE-2022-25946

On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration GC all versions prior to 9.0, when running in Appliance mode, an authenticated attacker with Administrator role privilege may be able to bypass Applian...

CVE-2022-25946

CVE-2022-25946 affects F5 BIG-IP Guided Configuration (GC) and related appliance-mode implementations. The vulnerability arises from a missing integrity check, allowing an authenticated Administrator to bypass Appliance mode restrictions. Affected: GC in 9.x and all GC-enabled appliances; BIG-IP ...

CVE-2022-26890

On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prior to 16.1.2.1, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when ASM or Advanced WAF, as well as APM, are configured on a virtual server, the ASM policy is configured with Sessi...

CVE-2022-26890

The CVE-2022-26890 issue affects F5 BIG-IP ASM, Advanced WAF, and APM when the ASM policy uses Session Awareness and the Use APM Username and Session ID option is enabled on a virtual server. The bd process can terminate due to undisclosed requests, causing a DoS (traffic disruption as the bd pro...

PT-2022-18126

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Advanced WAF, ASM, and APM versions prior to 16.1.2.1 F5 BIG-IP Advanced WAF, ASM, and APM versions 15.1.x prior to 15.1.5 F5 BIG-IP Advanced WAF, ASM, and APM versions 14.1.x prior to 14.1.4.6 F5 BIG-IP Advanced WAF, ASM, and APM...

PT-2022-19657

Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM, Advanced WAF, ASM, or APM versions prior to 16.1.2.2 F5 BIG-IP LTM, Advanced WAF, ASM, or APM versions prior to 15.1.5 F5 BIG-IP LTM, Advanced WAF, ASM, or APM versions prior to 14.1.4.6 F5 BIG-IP LTM, Advanced WAF, ASM, or APM...

F5 Networks BIG-IP : BIG-IP ASM and Advanced WAF vulnerability (K03442392)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5 / 14.1.4.6 / 15.1.5 / 16.1.2.1 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K03442392 advisory. - On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prior to 16.1.2.1, 15.1.x...

CVE-2022-26890: Always-Incorrect Control Flow Implementation

On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prior to 16.1.2.1, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when ASM or Advanced WAF, as well as APM, are configured on a virtual server, the ASM policy is configured with Sessi...

CVE-2022-29491: NULL Pointer Dereference

On F5 BIG-IP LTM, Advanced WAF, ASM, or APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a virtual server is configured with HTTP, TCP on one side client/server, and DTLS on the other...

GSD-2022-1002406 MIPS: fix fortify panic when copying asm exception handlers

MIPS: fix fortify panic when copying asm exception handlers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.276 by commit...

GSD-2022-1001999 MIPS: fix fortify panic when copying asm exception handlers

MIPS: fix fortify panic when copying asm exception handlers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.111 by commit...

GSD-2022-1001716 MIPS: fix fortify panic when copying asm exception handlers

MIPS: fix fortify panic when copying asm exception handlers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...

PT-2022-30272

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.111 Description The issue is related to a fortify panic when copying asm exception handlers in the MIPS architecture. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30467

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.4.189 Description The issue is related to a potential security problem in the Linux Kernel, specifically with the MIPS architecture. It involves a fix for a fortify panic that occurs when copying asm exception...

PT-2022-30750

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description The issue is related to a fortify panic when copying asm exception handlers in the MIPS architecture. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30591

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to a fortify panic when copying asm exception handlers in the MIPS architecture. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29321

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to a fortify panic when copying asm exception handlers in the MIPS architecture. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29663

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to a fortify panic when copying asm exception handlers in the MIPS architecture. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29989

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to a fortify panic when copying asm exception handlers in the MIPS architecture. The actual impact and attack plausibility have not yet been proven. Recommendations For...