F5 Networks BIG-IP : BIG-IP directory traversal vulnerability (SOL16121)

Multiple directory traversal vulnerabilities in F5 BIG-IP before 10.2.2 allow local users with the 'Resource Administrator' or 'Administrator' role to enumerate and delete arbitrary files via a .. dot dot in the name parameter to 1 tmui/Control/jspmap/tmui/system/archive/properties.jsp or 2...

F5 Networks BIG-IP : BIND vulnerability (SOL14601)

ISC BIND 9.8.x through 9.8.4-P1 and 9.9.x through 9.9.2-P1, in certain configurations involving DNS64 with a Response Policy Zone that lacks an AAAA rewrite rule, allows remote attackers to cause a denial of service assertion failure and named daemon exit via a query for an AAAA record. C Tenable...

F5 Networks BIG-IP : Linux RPM vulnerability (SOL16383)

Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d directory C Tenable Network...

F5 Networks BIG-IP : IPv6 Neighbor Discovery Protocol (NDP) vulnerability (SOL9528)

The remote BIG-IP device is missing a patch required by a security advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL9528. The text description of this plugin is C F5 Networks...

F5 Networks BIG-IP : CRIME vulnerability via the SPDY protocol (K14059)

The SPDY protocol 3, and earlier, can perform TLS encryption of compressed data without properly obfuscating the length of the unencrypted data. This allows man-in-the-middle attackers to obtain plain text HTTP headers by observing length differences during a series of guesses in which a string i...

F5 Networks BIG-IP : OpenSSL vulnerability (SOL16913)

The X509cmptime function in crypto/x509/x509vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted length field in ASN1TIME data, as demonstrated...

F5 Networks BIG-IP : Multiple DNS vulnerabilities (SOL6365)

This security advisory describes several potential vulnerabilities in Internet Systems Consortium's Berkeley Internet Name Daemon BIND. BIND is provided on some F5 Networks products. The potential vulnerabilities include: execution of arbitrary code, denial of service, and other unpredictable...

F5 Networks BIG-IP : BIG-IP last hop kernel module vulnerability (K00032124)

The BIG-IP last hop kernel module may leak memory when processing User Datagram Protocol UDP traffic. The memory leak may cause denial-of-service DoS conditions for the BIG-IP system. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5...

F5 Networks BIG-IP : PHP vulnerabilities (SOL16993)

PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situations, which allows remote attackers to bypass intended extension restrictions and access files or directories with unexpected names via a crafted argument to 1...

F5 Networks BIG-IP : Linux kernel vulnerabilities (K62700573)

CVE-2010-5313 Race condition in arch/x86/kvm/x86.c in the Linux kernel before 2.6.38 allows L2 guest OS users to cause a denial of service L1 guest OS crash via a crafted instruction that triggers an L2 emulation failure report, a similar issue to CVE-2014-7842. CVE-2014-7842 Race condition in...

F5 Networks BIG-IP : file vulnerability (SOL16875)

file before 5.11 and libmagic allow remote attackers to cause a denial of service crash via a crafted Composite Document File CDF file that triggers 1 an out-of-bounds read or 2 an invalid pointer dereference. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

F5 Networks BIG-IP : BIG-IP file validation vulnerability (K49580002)

The BIG-IP Configuration utility may not properly validate file type or contents where uploaded files are allowed in the Access Policy Manager configuration section uploadImage.php. CVE-2015-8021 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

F5 Networks BIG-IP : SNTP vulnerability (K60352002)

SNTP processing would enter into an infinite loop when a crafted NTP packet was received. CVE-2015-5219 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution K60352002. The text description of this plugin is C F5...

F5 Networks BIG-IP : Linux kernel vulnerabilities (K31026324)

CVE-2015-2925 The prependpath function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which allows local users to bypass an intended container protection mechanism by renaming a directory, related to a 'double-chroot attack.'...

F5 Networks BIG-IP : Linux kernel vulnerability (K17462)

arch/x86/kernel/entry64.S in the Linux kernel before 3.19.2 does not prevent the TSCOMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the 1 fork or 2 close system call, as demonstrated b...

F5 Networks BIG-IP : SNMP vulnerability (K17378)

The snmppduparse function in snmpapi.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmpvariablelist item when parsing of the SNMP PDU fails, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted packet...

F5 Networks BIG-IP : GRUB2 vulnerability (SOL25901386)

Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, obtain sensitive information, or cause a denial of service disk corruption via backspace characters in the 1 grubusernameget function in grub-core/normal/auth.c or the 2...

F5 Networks BIG-IP : Linux kernel vulnerability (K94105604)

The keygcunusedkeys function in security/keys/gc.c in the Linux kernel through 4.2.6 allows local users to cause a denial of service OOPS via crafted keyctl commands. CVE-2015-7872 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5...

F5 Networks BIG-IP : BIG-IP AOM password sync vulnerability (SOL05272632)

BIG-IP systems on the 2000, 4000, 5000, 7000, and 10000 platforms may fail to sync passwords to the Always-On-Management AOM. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5 Networks BIG-IP Solution SOL05272632. The text description o...

F5 Networks BIG-IP : Privilege escalation vulnerability (K75136237)

dcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AAM 11.4.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AFM and PEM 11.3.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP DNS 12.0.0 before 12.0.0 HF1, BIG-IP Edge...