8267 matches found
CVE-2016-9253
In F5 BIG-IP 12.1.0 through 12.1.2, specific websocket traffic patterns may cause a disruption of service for virtual servers configured to use the websocket profile...
CVE-2017-6137
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2, undisclosed traffic patterns received while software SYN cookie protection is engaged may cause a disrupti...
CVE-2017-6137
The CVE-2017-6137 issue affects multiple F5 BIG-IP modules (BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WebSafe) on versions 11.6.1 HF1, 12.0.0 HF3–HF4, and 12.1.0–12.1.2. Undisclosed traffic patterns, when SYN cookie protection is...
CVE-2016-9251
CVE-2016-9251 affects F5 BIG-IP 12.0.0–12.1.2, where an authenticated attacker can escalate privileges via a crafted iControl REST connection. The vulnerability affects multiple BIG-IP modules using iControl REST (e.g., LTM, AAM, AFM, Analytics, APM, etc.) and is triggered by domain-specific REST...
CVE-2016-9257
In F5 BIG-IP APM 12.0.0 through 12.1.2, non-authenticated users may be able to inject JavaScript into a request that will then be rendered and executed in the context of the Administrative user when the Administrative user is viewing the Access System Logs, allowing the non-authenticated user to...
CVE-2016-9257
F5 BIG-IP APM 12.0.0–12.1.2 are vulnerable to Cross-Site Scripting (XSS) due to rendering of not escaped content from session variables in Access Reports. The vulnerability can be exploited by a non-authenticated user to inject JavaScript that runs in the context of an Administrative user when vi...
CVE-2017-0302
Summary: CVE-2017-0302 affects F5 BIG-IP APM; an authenticated user with a valid session can cause a traffic disruption when the requested URL length is under 16 characters. Affected versions (per vendor advisory): BIG-IP APM 12.0.0–12.1.2 and 13.0.0. Root cause / vulnerability: Insufficient boun...
CVE-2016-9256
In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the rolemap is not reloaded between the time the permissions are changed and the time of the user's next request. This is a race condition that occurs rarely in normal...
CVE-2016-9251
In F5 BIG-IP 12.0.0 through 12.1.2, an authenticated attacker may be able to cause an escalation of privileges through a crafted iControl REST connection...
CVE-2016-9256
F5 BIG-IP iControl vulnerability CVE-2016-9256 involves a race condition where permissions enforced by iControl can lag behind actual user permissions if the role_map is not reloaded between permission changes and the user’s next request. Affected products and versions include BIG-IP 12.0.0 throu...
F5 Networks BIG-IP : iControl REST vulnerability (K41107914)
In F5 BIG-IP 12.0.0 through 12.1.2, an authenticated attacker may be able to cause an escalation of privileges through a crafted iControl REST connection. CVE-2016-9251 Impact An authenticated attacker may be able to cause an escalation of privileges through a crafted iControl REST connection. C...
F5 Networks BIG-IP : TMM vulnerability (K82851041)
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2, undisclosed traffic patterns received while software SYN cookie protection is engaged may cause a disrupti...
F5 Networks BIG-IP : Websocket profile vulnerability (K51351360)
In F5 BIG-IP 12.1.0 through 12.1.2, specific websocket traffic patterns may cause a disruption of service for virtual servers configured to use the websocket profile. CVE-2016-9253 Note : Virtual servers configured to use the HTTP profile and no websocket profile that process websocket traffic ar...
F5 Networks BIG-IP : BIG-IP APM redirect vulnerability (K87141725)
Insufficient boundary checks on the request URL may cause the tmm process to assert when the user is redirected back to the original request URL following successful authentication to the BIG-IP APM system. CVE-2017-0302 Impact An authenticated user with an established access session to the BIG-I...
F5 Networks BIG-IP : BIG-IP management vulnerability (K55792317)
In F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user with access to the control plane may be able to delete arbitrary files through an undisclosed mechanism. CVE-2016-9250 Impact An unauthenticated user with access to the management control plane may be...
F5 Networks BIG-IP : Linux kernel vulnerability (K20022580)
Use-after-free vulnerability in net/unix/afunix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AFUNIX socket permissions or cause a denial of service panic via crafted epollctl calls. CVE-2013-7446 C Tenable Network Security, Inc. The descriptive text and package checks ...
F5 Networks BIG-IP : Linux kernel vulnerability (K68852819)
Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service use-after-free by making multiple bind system calls without properly ascertaining whether a socket has the SOCKZAPPED status, related to...
CVE-2017-6128
An attacker may be able to cause a denial-of-service DoS attack against the sshd component in F5 BIG-IP, Enterprise Manager, BIG-IQ, and iWorkflow...
