F5 Networks BIG-IP : Oracle Java SE vulnerability (K44923228)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with...

F5 Networks BIG-IP : MQTT vulnerability (K26583415)

In certain circumstances, when processing traffic through a Virtual Server with an associated MQTT profile, the TMM process may produce a core file and take the configured HA action. CVE-2018-15323 Impact This vulnerability allows remote attackers to cause a denial-of-service DoS on the BIG-IP...

F5 Networks BIG-IP : TMM vulnerability (K52167636)

Features in the BIG-IP system that utilizeinflate functionality directly, via an iRule, or via the inflate code from PEM module are subjected to a service disruption via a 'Zip Bomb' attack.CVE-2017-6153 Impact BIG-IP systems deployed in Forward Proxy mode with the inflate functionality enabled a...

F5 Networks BIG-IP : TMM WebSocket vulnerability (K11718033)

In some circumstances, the Traffic Management Microkernel TMM does not properly handle certain malformed WebSocket requests/responses, which allows remote attackers to cause a denial of service DoS or possible remote code execution on the BIG-IP system. CVE-2018-5504 Impact This vulnerability...

F5 Networks BIG-IP : TMM vulnerability (K45611803)

F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.1 virtual servers with HTTP/2 profiles enabled are vulnerable to 'HPACK Bomb'. CVE-2018-5530 Impact HPACK bombs are designed to consume an abnormal amount of memory resources on a target system, which can result in a denial of service...

F5 Networks BIG-IP : BIG-IP APM CRL vulnerability (K34652116)

In some situations, the CRLDP Auth access policy agent may treat revoked certificates as valid when the BIG-IP APM system failsto download a new Certificate Revocation List.CVE-2018-15326. Impact Users with revoked certificatesmay be able to gain access to the system. C Tenable Network Security,...

F5 Networks BIG-IP : BIG-IP ASM vulnerability (K12403422)

When the BIG-IP ASM system processes HTTP requests, an unusually large number of parameters can cause excessive CPU usage in the BIG-IP ASM bd process. CVE-2018-5541 Impact BIG-IP When this vulnerability is exploited, the BIG-IP ASM system may experience a denial of service DoS. BIG-IP systems th...

F5 Networks BIG-IP : TMM vulnerability (K12044607)

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 and 11.5.0 - 11.5.4, an undisclosed sequence of packets sent to BIG-IP High Availability state mirror listeners primary and/or secondary IP may...

F5 Networks BIG-IP : TMM vulnerability (K27044729)

Under certain conditions, theTraffic Management Microkernel TMM may restart and produce a core file while processing BIG-IP APM data. CVE-2018-5528 Impact This vulnerability allows remote attackers to cause a denial of service DoS on the BIG-IP system. The BIG-IP system will temporarily fail to...

F5 Networks BIG-IP : BIG-IP PEM vulnerability (K10329515)

Under certain conditions, TMM may produce a core file and restart when processing compressed data though a virtual server with an associated PEM profile using the content insertion option. CVE-2018-5508 Impact The Traffic Management Microkernel TMM generates a core file and restarts. If configure...

F5 Networks BIG-IP : TMM vulnerability (K64208870)

Malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with the non-default 'normalize URI' configuration options used in iRules and/or BIG-IP LTM policies. CVE-2018-15319 Impact An attacker may be able to disrupt traffic or cause the...

F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K00363258)

A local file vulnerability exists in the BIG-IP Configuration utility that exposes files containing F5-provided data only, and do not include configuration data, proxied traffic, or other potentially sensitive customer data. CVE-2018-5525 Impact Authenticated users may be able to retrieve files...

F5 Networks BIG-IP : Linux kernel vulnerability (K02613439)

The dccpv6requestrecvsock function in net/dccp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890. CVE-2017-9076 Impact This...

F5 Networks BIG-IP : BIG-IP ASM and BIG-IP AFM/BIG-IP Analytics vulnerability (K23520761)

On F5 BIG-IP 13.1.0 - 13.1.0.3, when ASM and one or more of these modules AFM/AVR are provisioned, the Traffic Management Microkernel TMM may restart while processing DNS requests when thevirtual server is configured with a DNS profile and the Protocol setting is set to TCP . CVE-2018-5505 Note :...

F5 Networks BIG-IP : Linux kernel vulnerability (K84024430)

The ip6find1stfragopt function in net/ipv6/outputcore.c in the Linux kernel through 4.12.3 allows local users to cause a denial of service integer overflow and infinite loop by leveraging the ability to open a raw socket. CVE-2017-7542 Impact This vulnerability allowsdisruption of service. C...

F5 Networks BIG-IP : Apache Portable Runtime vulnerability (K52319810)

When aprtimeexp or aprosexptime functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an aprtimeexpt value, potentially revealing the contents of a different static heap value or...

F5 Networks BIG-IP : TMOS vulnerability (K49440608)

When a specifically configured virtual server receives traffic of an undisclosed nature, the Traffic Management Microkernel TMM will crash and take the configured failover action, potentially causing a denial of service. The configuration that exposes this issue is not common and in general does...

F5 Networks BIG-IP : tmsh utility vulnerability (K28003839)

A BIG-IP user granted with tmsh access may cause the BIG-IP system to experience denial-of-service DoS when the BIG-IP user uses the tmsh utility to run the editcli preference commandand proceeds to savethe changes to another filename repeatedly. This actionutilizes storage space on the /var...

F5 Networks BIG-IP : BIG-IP APM client for Linux and macOS vulnerability (K54431371)

The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to getownership of files owned by root on the local client host.CVE-2018-5546 Impact A malicious, local, unprivileged user...

F5 Networks BIG-IP : ssldump vulnerability (K46121888)

Administrative users by way of undisclosed methods can exploit the ssldump utilityto write to arbitrary file paths. For users who do not have Advanced Shell access for example, any user when licensed for Appliance Mode, this allows more permissive file access than intended. CVE-2018-5519 Impact...