F5 Networks BIG-IP : BIG-IP APM OAuth failure response message vulnerability (K27617652)

When APM is deployed as an OAuth Resource Server, APM becomes a client application to an external OAuth authorization server. In certain cases when communication between the BIG-IP APM and the OAuth authorization server is lost, APM may not display the intended message in the failure response...

PT-2018-12979

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.2.1 and greater Description The issue allows a BIG-IP system's user with any role, including the Guest Role, to access and download previously generated snapshot files, such as QKView and TCPDumps, through unrestricted...

F5 Networks BIG-IP : BIG-IP ARM BGP vulnerability (K17264695)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.5.9 / 11.6.3.3 / 12.1.3.7 / 13.1.1.2 / 14.0.0.3 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K17264695 advisory. - The BGP daemon bgpd in all IP Infusion ZebOS versions to 7.10.6 and all...

F5 Networks BIG-IP : TMUI vulnerability (K61620494)

When authenticated administrative users run commands in the Traffic Management User Interface TMUI, also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced. CVE-2018-15329 Impact This vulnerability may allow non-administrative TMUI users to run...

F5 Networks BIG-IP : BIG-IP AAM DCDB vulnerability (K54843525)

The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.4 / 13.0.0HF1 / 13.0.1 / 13.1.0. It is, therefore, affected by a vulnerability as referenced in the K54843525 advisory. - On BIG-IP AAM 13.0.0 or 12.1.0-12.1.3.7, the dcdbconvert utility used by BIG-IP AAM fails to dr...

F5 Networks BIG-IP : TMM vulnerability (K23328310)

The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.4 / 13.1.1.2 / 14.0.0.3 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K23328310 advisory. - On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, when a virtual server using th...

PT-2018-12974

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 12.1.0 through 12.1.3.7 F5 BIG-IP versions 13.0.0 through 13.1.1.1 F5 BIG-IP versions 14.0.0 through 14.0.0.2 F5 Enterprise Manager version 3.1.1 Description The issue affects authenticated administrative users who run...

PT-2018-12976

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 12.1.0 through 12.1.3.7 F5 BIG-IP versions 13.0.0 through 13.1.1.1 F5 BIG-IP versions 14.0.0 through 14.0.0.2 Description The issue occurs when a virtual server using the inflate functionality processes a gzip bomb as a...

F5 Networks BIG-IP : Intel SPI Flash vulnerability (K19855851)

Configuration of SPI Flash in platforms based on multiple Intel platforms allow a local attacker to alter the behavior of the SPI flash potentially leading to a Denial of Service. CVE-2017-5703 Impact BIG-IP A local attacker can alter the behavior of the SPI Flash memory, potentially leading to a...

F5 Networks BIG-IP : OpenSSH vulnerability (K24324390)

authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process. CVE-2016-10011 Impact A locally authenticated...

F5 Networks BIG-IP : glibc vulnerability (K16365)

The nssdns implementation of getnetbyname in GNU C Library aka glibc before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service infinite loop by sending a positive answer while a network name is being process...

F5 Networks BIG-IP : glibc vulnerability (K06493172)

Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in the GNU C Library aka glibc or libc6 allows remote attackers to cause a denial of service crash via vectors involving hostent conversion. NOTE: this vulnerability exists because of an incomplete fix for...

F5 Networks BIG-IP : OpenSSH vulnerability (K31440025)

Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS11 modules by leveraging control over a forwarded agent-socket. CVE-2016-10009 C Tenable Network Security, Inc. The descriptive text and package checks in...

F5 Networks BIG-IP : GNU C Library (glibc) vulnerability (K29241247)

The fnmatch function in the GNU C Library aka glibc or libc6 before 2.22 might allow context-dependent attackers to cause a denial of service application crash via a malformed pattern, which triggers an out-of-bounds read. CVE-2015-8984 C Tenable Network Security, Inc. The descriptive text and...

F5 Networks BIG-IP : Linux kernel vulnerability (K95343321)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.5.9 / 11.6.4 / 12.1.4.1 / 13.1.1.4 / 14.0.1.1 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K95343321 advisory. - Linux kernel versions 4.9+ can be forced to make very expensive calls to...

F5 Networks BIG-IP : Apache Tomcat vulnerability (K73008537)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.0.1.1 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K73008537 advisory. - An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in...

F5 Networks BIG-IP : BIG-IP SNMP vulnerability (K42027747)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K42027747 advisory. The passphrases for SNMPv3 users and trap destinations that are used forauthentication and privacy are not handled by the BIG-I...

PT-2018-12973

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.x through 14.0.x F5 Enterprise Manager version 3.1.1 F5 BIG-IQ versions 4.x through 6.x F5 iWorkflow version 2.x Description The issue concerns the handling of passphrases for SNMPv3 users and trap destinations used for...

CVE-2018-15332

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host in a race condition...

CVE-2018-15332

The CVE affects F5 BIG-IP APM: the svpn component for Linux/macOS versions prior to 7.1.7.2 runs as a privileged process and, in a race condition, an unprivileged user can gain ownership of files owned by root on the local host. This enables local privilege escalation and potential information di...