F5 Networks BIG-IP : BIND vulnerability (K10092301)

A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 - 9.11.7, 9.12.0 - 9.12.4-P1, 9.14.0 - 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of...

F5 Networks BIG-IP : iRulesLX debug NodeJS vulnerability (K75532331)

Similar to the issue identified inCVE-2018-12120, the BIG-IP system will bind a debug nodejs process to all interfaces when invoked. This may expose the process to unauthorized users if the plugin is left in debug mode and the port is accessible.CVE-2019-6644 Impact A remote attacker may be able ...

F5 Networks BIG-IP : Linux kernel vulnerability (K42142782)

A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary. CVE-2017-15121 Impact An attacker can exploit this vulnerability to cause a denial of service DoS on the affected...

F5 Networks BIG-IP : BIG-IP mcpd vulnerability (K87920510)

When processing authentication attempts for control-plane users, mcpd leaks a small amount of memory. Under rare conditions, attackers with access to the management interface can eventually deplete memory on the system. CVE-2019-6647 Impact Repeated failed authentication attempts progressively...

F5 Networks BIG-IP : BIG-IP FTP profile vulnerability (K15759349)

FTP traffic passing through a virtual server with both an active FTP profile associated and connection mirroring configured may cause the Traffic Management Microkernel TMM to stop responding, causing the configured high availability HA action to be taken. CVE-2019-6645 Impact This vulnerability...

F5 Networks BIG-IP : iControl REST vulnerability (K53990093)

REST users with guest privileges may beable to escalate their privilegesand run commands with admin privileges. CVE-2019-6646 Impact Users with guest privileges are able to exploit this vulnerability to escalate their access privileges. C Tenable Network Security, Inc. The descriptive text and...

F5 Networks BIG-IP : F5 tmsh vulnerability (K40378764)

"Authenticated users with the ability to upload files via scp, for example can escalate their privileges to allow root shell access from within the TMOS Shell tmsh interface. The tmsh interface allows users to execute a secondary program via tools like sftp or scp . CVE-2019-6642 Impact...

Multiple F5 BIG-IP Products CVE-2019-6647 Memory Leak Denial of Service Vulnerability

Description Multiple F5 BIG-IP Products are prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause excessive memory consumption; resulting in denial-of-service conditions. Technologies Affected F5 BIG-IP AAM 11.5.1 F5 BIG-IP AAM 11.6.4 F5 BIG-IP AAM 12.1.0 F5 BIG-...

F5 Networks BIG-IP : Linux kernel vulnerability (K24578092)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.2.2 / 15.0.0. It is, therefore, affected by a vulnerability as referenced in the K24578092 advisory. - Race condition in kernel/events/core.c in the Linux kernel before 4.9.7 allows local users to gain privileges via ...

F5 BIG-IP Cross-Site Scripting Vulnerability (CNVD-2019-30622)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A cross-site scripting vulnerability exists in F5 BIG-IP AFM and PEM, which can be exploited by an attacker to execute...

F5 BIG-IP Information Disclosure Vulnerability (CNVD-2019-30623)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. An information disclosure vulnerability exists in SNMP in F5 BIG-IP, which can be exploited by an attacker to gain access to...

F5 BIG-IP Cross-Site Scripting Vulnerability (CNVD-2019-30620)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A cross-site scripting vulnerability exists in the AFM feed list in the F5 BIG-IP AFM and ASM, which can be exploited by an...

F5 BIG-IP Permission License and Access Control Issues Vulnerability (CNVD-2019-32034)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A vulnerability exists in F5 BIG-IP with privilege permission and access control issues. An attacker can exploit this...

Cross-site scripting vulnerability in multiple F5 products (CNVD-2019-32053)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A cross-site scripting vulnerability exists in multiple F5 products. An attacker can exploit the vulnerability to execute...

F5 BIG-IP Application Security Manager Resource Management Error Vulnerability

F5 BIG-IP Application Security Manager ASM is a Web Application Firewall WAF from F5 USA that provides secure remote access, protects email, and simplifies Web access control while enhancing network and application performance. A resource management error vulnerability exists in F5 BIG-IP...

F5 BIG-IP Encryption Problem Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. The F5 BIG-IP is vulnerable to an encryption issue. An attacker could exploit this vulnerability to decrypt encrypted...

F5 SSL Orchestrator Competitive Conditions Issue Vulnerability

F5 SSL Orchestrator is an all-in-one appliance solution for SSL infrastructures from F5, Inc. that provides policy-based dynamic decryption, encryption and traffic control. F5 SSL Orchestrator is vulnerable to a race condition issue. An attacker could exploit this vulnerability to restart the TMM...

F5 BIG-IP Input Validation Error Vulnerability (CNVD-2019-32030)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. An input validation error vulnerability exists in F5 BIG-IP. An attacker could exploit the vulnerability to interrupt service...

F5 BIG-IP Command Injection Vulnerability (CNVD-2019-30626)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A command injection vulnerability exists in F5 BIG-IP and BIG-IQ, which can be exploited by an attacker to execute illegal...

F5 BIG-IP Command Injection Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A command injection vulnerability exists in F5 BIG-IP and BIG-IQ. The vulnerability stems from the failure of a network system...