PT-2016-3871

Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM versions prior to 11.4.1 HF10 F5 BIG-IP LTM versions 11.5.x prior to 11.5.4 F5 BIG-IP LTM versions 11.6.x prior to 11.6.0 HF6 F5 BIG-IP AAM versions prior to 11.4.1 HF10 F5 BIG-IP AAM versions 11.5.x prior to 11.5.4 F5 BIG-IP AAM...

CVE-2015-8240: Undefined Security Weakness

The Traffic Management Microkernel TMM in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.0 HF6 and BIG-IP PSM before 11.4.1 HF10 does not properly handle TCP options, which allows remote attackers...

SOL11772107 - BIG-IP and BIG-IQ cloud image vulnerability CVE-2016-2084

Note: Upgrading a vulnerable version to a not vulnerable version will not mitigate this issue; performing an upgrade on a vulnerable instance will cause the instance to remain vulnerable after the upgrade. Furthermore, any backups that are made from a vulnerable instance and restored to a not...

SOL82679059 - BIG-IP APM SSO vulnerability CVE-2016-3686

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

F5 Networks BIG-IP : glibc vulnerability (K51079478)

Integer overflow in the GNU C Library aka glibc or libc6 before 2.23 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via the size argument to the hcreater function, which triggers out-of-bounds heap-memory access. CVE-2015-8778 ...

SOL21632201 - Linux kernel vulnerability CVE-2011-5321

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

F5 Networks BIG-IP : glibc vulnerability (K23946311)

The strftime function in the GNU C Library aka glibc or libc6 before 2.23 allows context-dependent attackers to cause a denial of service application crash or possibly obtain sensitive information via an out-of-range time value. CVE-2015-8776 C Tenable Network Security, Inc. The descriptive text...

F5 BIG-IP - glibc vulnerability CVE-2015-8776

The remote host is missing a security patch. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if description...

SOL40524634 - OpenSSL vulnerability CVE-2016-0797

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

F5 Networks BIG-IP : OpenSSL vulnerability (K93122894)

Double free vulnerability in the dsaprivdecode function in crypto/dsa/dsaameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a malformed DSA private key. CVE-2016-0705 C...

F5 BIG-IP - F5 TCP vulnerability CVE-2015-8240

The remote host is missing a security patch. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if description...

F5 BIG-IP - Linux kernel vulnerability CVE-2015-2922

The remote host is missing a security patch. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:f5:big-ip"; if description...

F5 Networks BIG-IP : Linux kernel vulnerability (SOL51518670)

The ndiscrouterdiscovery function in net/ipv6/ndisc.c in the Neighbor Discovery ND protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit setting via a small hoplimit value in a Router Advertisement RA message. C Tenable...

Multiple F5 Products TCP Option Handling Denial of Service Vulnerability

F5 BIG-IP LTM is a local traffic manager; APM is a suite of solutions that provide secure unified access to business-critical applications and networks. F5 BIG-IP LTM/APM fails to properly handle TCP options. A remote attacker could exploit this vulnerability to submit a special request for a...

F5 Networks BIG-IP : F5 TCP vulnerability (K06223540)

The Traffic Management Microkernel TMM in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.0 HF6 and BIG-IP PSM before 11.4.1 HF10 does not properly handle TCP options, which allows remote attackers...

F5 Networks BIG-IP : OpenSSL vulnerabilities (SOL95463126) (DROWN)

The getclientmasterkey function in s2srvr.c in the SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a accepts a nonzero CLIENT-MASTER-KEY CLEAR-KEY-LENGTH value for an arbitrary cipher, which allows man-in-the-middle attackers to...

F5 BIG-IP - OpenSSL vulnerabilities CVE-2016-0703 and CVE-2016-0704

The F5 BIG-IP system is missing a security update announced via the referenced vendor advisory. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SOL95463126 - OpenSSL vulnerabilities CVE-2016-0703 and CVE-2016-0704

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

SOL23196136 - OpenSSL vulnerability CVE-2016-0800

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

SOL21057235 - libpng out-of-bounds read vulnerability CVE-2015-7981

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...