F5 Networks BIG-IP : TLS vulnerability (K02714910)

In some circumstances, the Traffic Management Microkernel TMM does not properly handle certain malformed TLS1.2 records, which allows remote attackers to cause a denial-of-service DoS or possible remote command execution on the BIG-IP system. CVE-2017-6164 Impact A remote attacker may be able cau...

F5 Networks BIG-IP : TMM vulnerability (K94105051)

A remote attacker may be able to disrupt services on the BIG-IP if the TMM virtual server is configured with a HTML or a Rewrite profile. TMM may restart while processing some specially prepared HTML content from the back end. CVE-2018-5537 Impact The BIG-IP system may temporarily fail to process...

F5 Networks BIG-IP : TMM vulnerability (K43625118)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.3.3 / 12.1.5 / 13.1.3 / 14.0.0.3 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K43625118 advisory. - In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an...

F5 Networks BIG-IP : SSL Forward Proxy vulnerability (K20134942)

A remote attacker using undisclosed methods againstvirtual servers configured with a Client SSL or Server SSL profile that has the SSL Forward Proxy feature enabled can force the Traffic Management Microkernel TMM to leak memory. As a result, system memory usage increases over time, which may...

F5 Networks BIG-IP : BIG-IP APM VPN vulnerability (K20087443)

In F5 BIG-IP APM software version 13.0.0 and 12.1.2, in some circumstances, APM tunneled VPN flows can cause a VPN/PPP connflow to be prematurely freed or cause TMM to stop responding with a 'flow not in use' assertion. An attacker may be able to disrupt traffic or cause the BIG-IP system to fail...

F5 Networks BIG-IP : Reflected XSS vulnerability in an undisclosed Configuration utility page (K41704442)

A reflected Cross-Site Scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the current logged-in user. CVE-2018-15315 Impact BIG-IP A remote unauthenticated attacker could potentially exploit...

F5 Networks BIG-IP : DNS Express vulnerability (K45435121)

On F5 BIG-IP DNS 13.1.0-13.1.0.7, 12.1.3-12.1.3.5, DNS Express / DNS Zones accept NOTIFY messages on the management interface from source IP addresses not listed in the 'Allow NOTIFY From' configuration parameter when the db variable 'dnsexpress.notifyport' is set to any value other than the...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K62712037)

Under certain conditions for BIG-IP systems using FastL4 profiles, when the Reassemble IP Fragments option is disabled default, some specific large fragmented packets may restart the Traffic Management Microkernel TMM. CVE-2017-6150 Impact An attacker may be able to perform a denial-of-service Do...

F5 Networks BIG-IP : SSL forward proxy vulnerability (K45325728)

Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic. CVE-2018-5533 Impact This vulnerability may allow a remote attacker to cause the Traffic Management Microkernel TMM to produce a corefile,...

F5 Networks BIG-IP : IP Intelligence Feed List vulnerability (K11464209)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.5.6 / 11.6.3 / 12.1.2 HF1 / 13.0.0. It is, therefore, affected by a vulnerability as referenced in the K11464209 advisory. - X509 certificate verification was not correctly implemented in the IP Intelligence Subscriptio...

F5 Networks BIG-IP : TMM vulnerability (K46940010)

A malformed Transport Layer Security TLS handshake causes the Traffic Management Microkernel TMM to stop responding, leading to a disruption of service. This issue is only exposed on the data plane when a Proxy SSL configuration is enabled. The control plane is not impacted by this issue...

F5 Networks BIG-IP : DHCP client vulnerability (K08306700)

An out-of-bound memory access flaw was found in the way dhclient processed a DHCP response packet. A malicious DHCP server could potentially use this flaw to crash dhclient processes running on DHCP client machines via a crafted DHCP response packet. CVE-2018-5732 Impact An attacker can cause a...

F5 Networks BIG-IP : vCMP vulnerability (K03165684)

Malicious root users with access to a vCMP guest can disrupt service on adjacent vCMP guests running on the same host. Exploiting this vulnerability causes the vcmpd process on the adjacent vCMP guest to restart and produce a core file. This issue is only exploitable on a vCMP guest which is...

F5 Networks BIG-IP : Lazy FP state restore vulnerability (K21344224)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.1.2 / 14.0.0.3 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K21344224 advisory. System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocesso...

F5 Networks BIG-IP : TMM vulnerability (K55102452)

Undisclosed sequence of packets sent to Virtual Servers with client or server SSL profiles using AES-GCM cipher suitesmay cause disruption of data plane services. CVE-2017-6140 This vulnerability affects the following BIG-IP platforms:2000s,2200s,4000s,4200v,i5600, i5800,i7600, i7800,i10600,...

F5 Networks BIG-IP : TMM with HTTP/2 vulnerability (K45320419)

Maliciously crafted HTTP/2 request frames can lead to denial of service. There is data plane exposure for virtual servers when the HTTP2 profile is enabled. There is no control plane exposure to this issue. CVE-2018-5514 Impact The BIG-IP system may temporarily fail to process traffic as it...

F5 Networks BIG-IP : BIG-IP APM Edge Client vulnerability (K51220077)

The BIG-IP APM Edge Clientcomponent loads the policy library with user permission and bypassing the endpoint checks. CVE-2018-15316 Impact A malicious user can exploit this vulnerability on the APM Edge Clientby injecting a library file which will be loaded by the policy server and bypass the...

F5 Networks BIG-IP : BIG-IP APM logging disclosure vulnerability (K45432295)

Under rare conditions, the BIG-IP APM system appends log details when responding to client requests. Details in the log file can vary; customers running debug mode logging with BIG-IP APM are at highest risk. CVE-2017-6139 Impact A vulnerable BIG-IP APM system may append sensitivelogging...

F5 Networks BIG-IP : RADIUS authentication vulnerability (K62750376)

Using RADIUS authentication responses from a RADIUS server with IPv6 addresses may cause TMM to crash, leading to a failover event. CVE-2018-5515 Impact BIG-IP When a BIG-IP system receives a RADIUS authentication response from a IPv6 RADIUS server, the affected system produces a Traffic Manageme...

F5 Networks BIG-IP : TMM vulnerability (K33211839)

Every Multipath TCP MCTCP connection established leaks a small amount of memory. Virtual server using TCP profile with Multipath TCP MCTCP feature enabled will be affected by this issue. CVE-2018-5500 Impact Over a period of time, the memory leak may lead to memory exhaustion on the system. The...