F5 Networks BIG-IP : TMM vulnerability (K23328310)

The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.4 / 13.1.1.2 / 14.0.0.3 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K23328310 advisory. - On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, when a virtual server using th...

F5 Networks BIG-IP : BIG-IP AAM DCDB vulnerability (K54843525)

The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.4 / 13.0.0 HF1 / 13.0.1 / 13.1.0. It is, therefore, affected by a vulnerability as referenced in the K54843525 advisory. - On BIG-IP AAM 13.0.0 or 12.1.0-12.1.3.7, the dcdbconvert utility used by BIG-IP AAM fails to...

F5 Networks BIG-IP : Intel SPI Flash vulnerability (K19855851)

Configuration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker to alter the behavior of the SPI flash potentially leading to a Denial of Service. CVE-2017-5703 Impact BIG-IP A local attacker can alter the behavior of the SPI Flash memory, potentially leading to a...

F5 Networks BIG-IP : glibc vulnerability (K16365)

The nssdns implementation of getnetbyname in GNU C Library aka glibc before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service infinite loop by sending a positive answer while a network name is being process...

F5 Networks BIG-IP : glibc vulnerability (K06493172)

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library aka glibc or libc6 allows remote attackers to cause a denial of service crash via vectors involving hostent conversion. NOTE: this vulnerability exists because of an incomplete fix for...

F5 Networks BIG-IP : OpenSSH vulnerability (K24324390)

authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process. CVE-2016-10011 Impact A locally authenticated...

F5 Networks BIG-IP : GNU C Library (glibc) vulnerability (K29241247)

The fnmatch function in the GNU C Library aka glibc or libc6 before 2.22 might allow context-dependent attackers to cause a denial of service application crash via a malformed pattern, which triggers an out-of-bounds read. CVE-2015-8984 C Tenable Network Security, Inc. The descriptive text and...

F5 Networks BIG-IP : OpenSSH vulnerability (K31440025)

Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS11 modules by leveraging control over a forwarded agent-socket. CVE-2016-10009 C Tenable Network Security, Inc. The descriptive text and package checks in...

F5 Networks BIG-IP : Apache Tomcat vulnerability (K73008537)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.0.1.1 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K73008537 advisory. - An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in...

F5 Networks BIG-IP : Linux kernel vulnerability (K95343321)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.5.9 / 11.6.4 / 12.1.4.1 / 13.1.1.4 / 14.0.1.1 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K95343321 advisory. - Linux kernel versions 4.9+ can be forced to make very expensive calls to...

F5 Networks BIG-IP : BIG-IP SNMP vulnerability (K42027747)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K42027747 advisory. The passphrases for SNMPv3 users and trap destinations that are used forauthentication and privacy are not handled by the BIG-I...

F5 Networks BIG-IP : BIG-IP BIND vulnerability (K98528405)

A flaw in the 'deny-answer-aliases' feature can cause an INSIST assertion failure in named. CVE-2018-5740 Impact A flaw in a rarely used BIND feature can cause an assertion failure in named . As a result, the bind process restarts. C Tenable Network Security, Inc. The descriptive text and package...

F5 Networks BIG-IP : Apache vulnerability (K42644206)

Apache modules apacheauthtokenmod and modauthf5authtoken.cpp allow possible unauthenticated bruteforce on the emserverip authorization parameter to obtain which SSL client certificates used for mutual authentication between BIG-IQ or Enterprise Manager EM andmanaged BIG-IP devices. CVE-2017-6146...

F5 Networks BIG-IP : TMM with HTTP/2 vulnerability (K45320419)

Maliciously crafted HTTP/2 request frames can lead to denial of service. There is data plane exposure for virtual servers when the HTTP2 profile is enabled. There is no control plane exposure to this issue. CVE-2018-5514 Impact The BIG-IP system may temporarily fail to process traffic as it...

F5 Networks BIG-IP : SSL forward proxy vulnerability (K45325728)

Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic. CVE-2018-5533 Impact This vulnerability may allow a remote attacker to cause the Traffic Management Microkernel TMM to produce a corefile,...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K62712037)

Under certain conditions for BIG-IP systems using FastL4 profiles, when the Reassemble IP Fragments option is disabled default, some specific large fragmented packets may restart the Traffic Management Microkernel TMM. CVE-2017-6150 Impact An attacker may be able to perform a denial-of-service Do...

F5 Networks BIG-IP : SSL Forward Proxy vulnerability (K20134942)

A remote attacker using undisclosed methods againstvirtual servers configured with a Client SSL or Server SSL profile that has the SSL Forward Proxy feature enabled can force the Traffic Management Microkernel TMM to leak memory. As a result, system memory usage increases over time, which may...

F5 Networks BIG-IP : Lazy FP state restore vulnerability (K21344224)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.1.2 / 14.0.0.3 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K21344224 advisory. System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocesso...

F5 Networks BIG-IP : TMM vulnerability (K55102452)

Undisclosed sequence of packets sent to Virtual Servers with client or server SSL profiles using AES-GCM cipher suitesmay cause disruption of data plane services. CVE-2017-6140 This vulnerability affects the following BIG-IP platforms:2000s,2200s,4000s,4200v,i5600, i5800,i7600, i7800,i10600,...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K77671456)

The Traffic Management Microkernel TMM may restart when processing a specific sequence of packets on IPv6 virtual servers. CVE-2018-5510 Note : This vulnerability does not affect IPv4 virtual servers. Impact The Traffic Management Microkernel TMM generates a core file and restarts. If configured ...