F5 Networks BIG-IP : OpenSSH vulnerability (K24324390)

authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process. CVE-2016-10011 Impact A locally authenticated...

F5 Networks BIG-IP : GNU C Library (glibc) vulnerability (K29241247)

The fnmatch function in the GNU C Library aka glibc or libc6 before 2.22 might allow context-dependent attackers to cause a denial of service application crash via a malformed pattern, which triggers an out-of-bounds read. CVE-2015-8984 C Tenable Network Security, Inc. The descriptive text and...

F5 Networks BIG-IP : OpenSSH vulnerability (K31440025)

Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS11 modules by leveraging control over a forwarded agent-socket. CVE-2016-10009 C Tenable Network Security, Inc. The descriptive text and package checks in...

F5 Networks BIG-IP : Apache Tomcat vulnerability (K73008537)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.0.1.1 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K73008537 advisory. - An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in...

F5 Networks BIG-IP : Linux kernel vulnerability (K95343321)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.5.9 / 11.6.4 / 12.1.4.1 / 13.1.1.4 / 14.0.1.1 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K95343321 advisory. - Linux kernel versions 4.9+ can be forced to make very expensive calls to...

F5 Networks BIG-IP : BIG-IP SNMP vulnerability (K42027747)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K42027747 advisory. The passphrases for SNMPv3 users and trap destinations that are used forauthentication and privacy are not handled by the BIG-I...

CVE-2018-15332

The CVE affects F5 BIG-IP APM: the svpn component for Linux/macOS versions prior to 7.1.7.2 runs as a privileged process and, in a race condition, an unprivileged user can gain ownership of files owned by root on the local host. This enables local privilege escalation and potential information di...

CVE-2018-15332

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host in a race condition...

Race condition

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host in a race condition...

CVE-2018-15332

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host in a race condition...

CVE-2018-15332

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host in a race condition...

Mozilla Network Security Services CVE-2018-12404 Information Disclosure Vulnerability

Description Mozilla Network Security Services is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected F5 Traffix SDC 4.4.0 F5 Traffix SDC 5.0.0 F5 Traffix SDC 5.1.0 Mozilla Network...

F5 Networks BIG-IP : BIG-IP BIND vulnerability (K98528405)

A flaw in the 'deny-answer-aliases' feature can cause an INSIST assertion failure in named. CVE-2018-5740 Impact A flaw in a rarely used BIND feature can cause an assertion failure in named . As a result, the bind process restarts. C Tenable Network Security, Inc. The descriptive text and package...

F5 Networks BIG-IP : Apache vulnerability (K42644206)

Apache modules apacheauthtokenmod and modauthf5authtoken.cpp allow possible unauthenticated bruteforce on the emserverip authorization parameter to obtain which SSL client certificates used for mutual authentication between BIG-IQ or Enterprise Manager EM andmanaged BIG-IP devices. CVE-2017-6146...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K19361245)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.5.6 / 11.6.2 / 12.1.3 / 13.0.0. It is, therefore, affected by a vulnerability as referenced in the K19361245 advisory. - In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TM...

F5 Networks BIG-IP : Linux kernel vulnerability (K02236463)

The sctpv6createacceptsk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890. CVE-2017-9075 Impact This...

F5 Networks BIG-IP : TLS vulnerability (K02714910)

In some circumstances, the Traffic Management Microkernel TMM does not properly handle certain malformed TLS1.2 records, which allows remote attackers to cause a denial-of-service DoS or possible remote command execution on the BIG-IP system. CVE-2017-6164 Impact A remote attacker may be able cau...

F5 Networks BIG-IP : BIG-IP APM Edge Client vulnerability (K51220077)

The BIG-IP APM Edge Clientcomponent loads the policy library with user permission and bypassing the endpoint checks. CVE-2018-15316 Impact A malicious user can exploit this vulnerability on the APM Edge Clientby injecting a library file which will be loaded by the policy server and bypass the...

F5 Networks BIG-IP : BIG-IP APM logging disclosure vulnerability (K45432295)

Under rare conditions, the BIG-IP APM system appends log details when responding to client requests. Details in the log file can vary; customers running debug mode logging with BIG-IP APM are at highest risk. CVE-2017-6139 Impact A vulnerable BIG-IP APM system may append sensitivelogging...

F5 Networks BIG-IP : Reflected XSS vulnerability in an undisclosed Configuration utility page (K41704442)

A reflected Cross-Site Scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the current logged-in user. CVE-2018-15315 Impact BIG-IP A remote unauthenticated attacker could potentially exploit...