283 matches found
CVE-2020-5896
On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions...
CVE-2020-5898
In versions 7.1.5-7.1.9, BIG-IP Edge Client Windows Stonewall driver does not sanitize the pointer received from the userland. A local user on the Windows client system can send crafted DeviceIoControl requests to \.\urvpndrv device causing the Windows kernel to crash...
CVE-2020-5896
On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions...
CVE-2020-5897
In versions 7.1.5-7.1.9, there is use-after-free memory vulnerability in the BIG-IP Edge Client Windows ActiveX component...
Null pointer dereference
In versions 7.1.5-7.1.9, BIG-IP Edge Client Windows Stonewall driver does not sanitize the pointer received from the userland. A local user on the Windows client system can send crafted DeviceIoControl requests to \.\urvpndrv device causing the Windows kernel to crash...
CVE-2020-5898
In versions 7.1.5-7.1.9, BIG-IP Edge Client Windows Stonewall driver does not sanitize the pointer received from the userland. A local user on the Windows client system can send crafted DeviceIoControl requests to \.\urvpndrv device causing the Windows kernel to crash...
Design/Logic Flaw
On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions...
CVE-2020-5897
In versions 7.1.5-7.1.9, there is use-after-free memory vulnerability in the BIG-IP Edge Client Windows ActiveX component...
CVE-2020-5896
On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions...
CVE-2020-5898
In versions 7.1.5-7.1.9, BIG-IP Edge Client Windows Stonewall driver does not sanitize the pointer received from the userland. A local user on the Windows client system can send crafted DeviceIoControl requests to \.\urvpndrv device causing the Windows kernel to crash...
CVE-2020-5898
The CVE-2020-5898 issue affects BIG-IP Edge Client Windows Stonewall driver (versions 7.1.5–7.1.9). The root cause is improper sanitization of a userland pointer, enabling a local attacker to send crafted DeviceIoControl requests to \.\ urvpndrv, leading to a Windows kernel crash (DoS). According...
CVE-2020-5896
On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions...
CVE-2020-5897
In versions 7.1.5-7.1.9, there is use-after-free memory vulnerability in the BIG-IP Edge Client Windows ActiveX component...
CVE-2020-5897
CVE-2020-5897 affects the BIG-IP Edge Client Windows ActiveX in versions 7.1.5–7.1.9. It is a use-after-free that can cause memory corruption and, per the advisory, may enable code execution when a user loads a malicious page in Internet Explorer. Remediation is to upgrade to non‑vulnerable relea...
CVE-2020-5896: Incorrect Default Permissions
On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions...
CVE-2020-5898: Undefined Security Weakness
In versions 7.1.5-7.1.9, BIG-IP Edge Client Windows Stonewall driver does not sanitize the pointer received from the userland. A local user on the Windows client system can send crafted DeviceIoControl requests to \.\urvpndrv device causing the Windows kernel to crash...
CVE-2020-5897: Use After Free
In versions 7.1.5-7.1.9, there is use-after-free memory vulnerability in the BIG-IP Edge Client Windows ActiveX component...
PT-2020-18797
Name of the Vulnerable Software and Affected Versions BIG-IP Edge Client versions 7.1.5 through 7.1.9 Description The issue is related to a use-after-free memory vulnerability in the Windows ActiveX component. Recommendations For versions 7.1.5 through 7.1.9, update to a version that contains a f...
PT-2020-18796
Name of the Vulnerable Software and Affected Versions F5 BIG-IP Edge Client versions 7.1.5 through 7.1.9 Description The issue concerns weak file and folder permissions in the temporary folder of the Windows Installer Service of the BIG-IP Edge Client. Recommendations For versions 7.1.5 through...
PT-2020-18798
Name of the Vulnerable Software and Affected Versions BIG-IP Edge Client versions 7.1.5 through 7.1.9 Description The BIG-IP Edge Client Windows Stonewall driver does not properly sanitize pointers received from userland, allowing a local user on the Windows client system to send crafted...