F5 Networks BIG-IP : vCMP vulnerability (K03165684)

Malicious root users with access to a vCMP guest can disrupt service on adjacent vCMP guests running on the same host. Exploiting this vulnerability causes the vcmpd process on the adjacent vCMP guest to restart and produce a core file. This issue is only exploitable on a vCMP guest which is...

F5 Networks BIG-IP : TMM vulnerability (K43625118)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.3.3 / 12.1.5 / 13.1.3 / 14.0.0.3 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K43625118 advisory. - In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an...

F5 Networks BIG-IP : DNS Express vulnerability (K45435121)

On F5 BIG-IP DNS 13.1.0-13.1.0.7, 12.1.3-12.1.3.5, DNS Express / DNS Zones accept NOTIFY messages on the management interface from source IP addresses not listed in the 'Allow NOTIFY From' configuration parameter when the db variable 'dnsexpress.notifyport' is set to any value other than the...

F5 Networks BIG-IP : BIG-IP APM Edge Client vulnerability (K51220077)

The BIG-IP APM Edge Clientcomponent loads the policy library with user permission and bypassing the endpoint checks. CVE-2018-15316 Impact A malicious user can exploit this vulnerability on the APM Edge Clientby injecting a library file which will be loaded by the policy server and bypass the...

F5 Networks BIG-IP : BIG-IP APM logging disclosure vulnerability (K45432295)

Under rare conditions, the BIG-IP APM system appends log details when responding to client requests. Details in the log file can vary; customers running debug mode logging with BIG-IP APM are at highest risk. CVE-2017-6139 Impact A vulnerable BIG-IP APM system may append sensitivelogging...

F5 Networks BIG-IP : Linux kernel vulnerability (K02236463)

The sctpv6createacceptsk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890. CVE-2017-9075 Impact This...

F5 Networks BIG-IP : TMOS Shell vulnerability (K37442533)

Authenticated users granted TMOS Shell tmsh access can access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to exfiltrate objects on the file system which should not be allowed. CVE-2018-5516 Impact This...

F5 Networks BIG-IP : TMM DIAMETER vulnerability (K54130510)

When processing DIAMETER transactions with carefully crafted attribute-value pairs, TMM may restart. CVE-2018-5522 Impact This vulnerability allows for a remoteunauthorized disruption of service by way of an unspecified DIAMETER packet. C Tenable Network Security, Inc. The descriptive text and...

F5 Networks BIG-IP : vCMP Cavium Nitrox SSL hardware accelerator vulnerability (K52521791)

vCMP guests running on VIPRION 2100, 4200 and 4300 series blades cannot correctly decrypt ciphertext from established SSL sessions with small MTU. CVE-2018-5507 Impact BIG-IP The affected SSL connections are terminated unexpectedly. ARX / BIG-IQ / Enterprise Manager / F5 iWorkflow / LineRate /...

F5 Networks BIG-IP : BIG-IP APM VPN vulnerability (K20087443)

In F5 BIG-IP APM software version 13.0.0 and 12.1.2, in some circumstances, APM tunneled VPN flows can cause a VPN/PPP connflow to be prematurely freed or cause TMM to stop responding with a 'flow not in use' assertion. An attacker may be able to disrupt traffic or cause the BIG-IP system to fail...

F5 Networks BIG-IP : TLS vulnerability (K02714910)

In some circumstances, the Traffic Management Microkernel TMM does not properly handle certain malformed TLS1.2 records, which allows remote attackers to cause a denial-of-service DoS or possible remote command execution on the BIG-IP system. CVE-2017-6164 Impact A remote attacker may be able cau...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K19361245)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.5.6 / 11.6.2 / 12.1.3 / 13.0.0. It is, therefore, affected by a vulnerability as referenced in the K19361245 advisory. - In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TM...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K77671456)

The Traffic Management Microkernel TMM may restart when processing a specific sequence of packets on IPv6 virtual servers. CVE-2018-5510 Note : This vulnerability does not affect IPv4 virtual servers. Impact The Traffic Management Microkernel TMM generates a core file and restarts. If configured ...

F5 Networks BIG-IP : F5 BIG-IP TMM vulnerability (K31404801)

In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel TMM to produce a core file when it receives malformed URLs during categorization. CVE-2017-6169. Impact An attacker may be able to...

F5 Networks BIG-IP : TMM vulnerability (K94105051)

A remote attacker may be able to disrupt services on the BIG-IP if the TMM virtual server is configured with a HTML or a Rewrite profile. TMM may restart while processing some specially prepared HTML content from the back end. CVE-2018-5537 Impact The BIG-IP system may temporarily fail to process...

F5 Networks BIG-IP : Lazy FP state restore vulnerability (K21344224)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.1.2 / 14.0.0.3 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K21344224 advisory. System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocesso...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K62712037)

Under certain conditions for BIG-IP systems using FastL4 profiles, when the Reassemble IP Fragments option is disabled default, some specific large fragmented packets may restart the Traffic Management Microkernel TMM. CVE-2017-6150 Impact An attacker may be able to perform a denial-of-service Do...

F5 Networks BIG-IP : SSL Forward Proxy vulnerability (K20134942)

A remote attacker using undisclosed methods againstvirtual servers configured with a Client SSL or Server SSL profile that has the SSL Forward Proxy feature enabled can force the Traffic Management Microkernel TMM to leak memory. As a result, system memory usage increases over time, which may...

F5 Networks BIG-IP : DHCP client vulnerability (K08306700)

An out-of-bound memory access flaw was found in the way dhclient processed a DHCP response packet. A malicious DHCP server could potentially use this flaw to crash dhclient processes running on DHCP client machines via a crafted DHCP response packet. CVE-2018-5732 Impact An attacker can cause a...

F5 Networks BIG-IP : BIG-IP APM per-request policy object vulnerability (K27391542)

A remote attacker through undisclosed measures, may be able to exploit a virtual server configured with a BIG-IP APM per-request policy object and cause a memory leak in the BIG-IP APM module. CVE-2018-5536 Impact This vulnerability allows a disruption of service. C Tenable Network Security, Inc...