F5 Networks BIG-IP : libxml2 vulnerability (K16712298)

Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted XML...

F5 Networks BIG-IP : Oracle Java vulnerability (K25075696)

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508. CVE-2016-3500 C Tenable Network Security, Inc. The descriptive...

F5 Networks BIG-IP : TMM vulnerability (K33500120)

Under certain conditions for BIG-IP systems using a virtual server with an associated FastL4 profile and TCP analytics profile, a specific sequence of packets may cause the Traffic Management Microkernel TMM to restart. CVE-2016-9247 Impact An attacker may be able to disrupt traffic or cause the...

F5 BIG-IP - libarchive vulnerability CVE-2016-5418

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a...

F5 BIG-IP - libarchive vulnerability CVE-2016-5844

Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a crafted ISO file. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

F5 Networks BIG-IP : libarchive vulnerability (K24036027)

Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service application crash via a crafted ISO file. CVE-2016-5844 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP...

F5 Networks BIG-IP : libarchive vulnerability (K35246595)

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file. CVE-2016-5418 C Tenable Network Security, Inc. The descriptive text and package checks in this...

F5 Networks BIG-IP : BIG-IP FastL4 profile vulnerability (K36300805)

Under certain conditions for BIG-IP systems using FastL4 profiles, when the Reassemble IP Fragments option is disabled default, a specific sequence of fragmented packets may restart the Traffic Management Microkernel TMM. C Tenable Network Security, Inc. The descriptive text and package checks in...

F5 Networks BIG-IP : BIG-IP SPDY and HTTP/2 profile vulnerability (K01587042)

Under some circumstances, the Traffic Management Microkernel TMM may not properly clean-up pool member network connections when using SPDY or HTTP/2 virtual server profiles. CVE-2016-7475 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F...

F5 BIG-IP - ImageMagick vulnerability CVE-2015-8898

ImageMagick vulnerability CVE-2015-8898 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if description...

SOL36300805 - BIG-IP FastL4 profile vulnerability

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

F5 BIG-IP - BIG-IP SPDY and HTTP/2 profile vulnerability CVE-2016-7475

Under some circumstances, the Traffic Management Microkernel TMM may not properly clean-up pool member network connections when using SPDY or HTTP/2 virtual server profiles. CVE-2016-7475 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources...

SOL01587042 - BIG-IP SPDY and HTTP/2 profile vulnerability CVE-2016-7475

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

F5 Networks BIG-IP : ImageMagick vulnerabilities (K30403302)

CVE-2015-8895 Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service application crash via a crafted length value, which triggers a buffer overflow. CVE-2015-8896 Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5...

F5 Networks BIG-IP : ImageMagick vulnerability (K68785753)

The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted image file. CVE-2015-8898 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

SOL68785753 - ImageMagick vulnerability CVE-2015-8898

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

F5 Networks BIG-IP : OpenSSL vulnerability (K93600123)

The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session, NOTE: this vulnerability...

F5 Networks BIG-IP : OpenSSL vulnerability (K36488941)

Integer overflow in the EVPEncryptUpdate function in crypto/evp/evpenc.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service heap memory corruption via a large amount of data. CVE-2016-2106 C Tenable Network Security, Inc. The descriptive text and...

F5 Networks BIG-IP : libgd vulnerability (K71581599)

The output function in gdgifout.c in the GD Graphics Library aka libgd allows remote attackers to cause a denial of service out-of-bounds read via a crafted image. CVE-2016-6161 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks...

F5 Networks BIG-IP : OpenSSL vulnerability (K51920288)

Integer overflow in the EVPEncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service heap memory corruption via a large amount of binary data. CVE-2016-2105 C Tenable Network Security, Inc. The descriptive te...