CVE-2018-5535

CVE-2018-5535 affects F5 BIG-IP TMM when a Virtual Server uses a QoE profile with Video enabled. Specifically crafted HTTP responses may cause TMM to buffer data incorrectly, leading to a restart and a Denial of Service. Affected versions include BIG-IP 14.0.0, 13.0.0–13.1.0, 12.1.0–12.1.3, and 1...

CVE-2018-5534

CVE-2018-5534 affects F5 BIG-IP products with SSL Forward Proxy enabled. Affected: BIG-IP versions 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, and 11.5.0-11.5.6. Root cause: TMM may core while processing SSL forward proxy traffic, leading to service disruption. Remediation: upgrade...

CVE-2018-5534: Improper Input Validation

Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic...

PT-2018-17029

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.1 through 11.6.3 F5 BIG-IP versions 12.1.0 through 12.1.3 F5 BIG-IP versions 13.0.0 through 13.1.0 F5 BIG-IP version 14.0.0 Description The issue occurs when specifically crafted HTTP responses are processed by a Virtua...

CVE-2018-5535: Improper Input Validation

On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed by a Virtual Server with an associated QoE profile that has Video enabled, may cause TMM to incorrectly buffer response data causing the TMM to restart resulting in a Denial of...

PT-2018-17026

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.2.1 through 11.5.6 F5 BIG-IP versions 11.6.0 through 11.6.3.1 F5 BIG-IP versions 12.1.0 through 12.1.2 F5 BIG-IP version 13.0.0 Description The issue concerns the DNS Cache of TMM, where a cached domain name may still be...

CVE-2018-5540: Incorrect Permission Assignment for Critical Resource

On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.1.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.1.0-2.3.0 the big3d process does not irrevocably minimize group privileges at start up...

CVE-2018-5533: Improper Input Validation

Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic...

PT-2018-17034

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 13.0.0 through 13.0.1 F5 BIG-IP versions 12.1.0 through 12.1.3.3 F5 BIG-IP versions 11.6.0 through 11.6.3.1 F5 BIG-IP versions 11.5.1 through 11.5.6 Enterprise Manager version 3.1.1 BIG-IQ Centralized Management versions 5.0...

CVE-2018-5532: Undefined Security Weakness

On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be resolved by the cache even after the parent server revokes the record, if the DNS Cache is receiving a stream of requests for the cached name...

PT-2018-17028

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.0 through 11.5.6 F5 BIG-IP versions 11.6.0 through 11.6.3.1 F5 BIG-IP versions 12.1.0 through 12.1.3.1 F5 BIG-IP versions 13.0.0 F5 BIG-IP versions 13.1.0 through 13.1.0.5 Description The issue occurs under certain...

PT-2018-17027

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.0 through 11.5.6 F5 BIG-IP versions 11.6.0 through 11.6.3.1 F5 BIG-IP versions 12.1.0 through 12.1.2 F5 BIG-IP version 13.0.0 Description The issue occurs under certain conditions when processing SSL forward proxy...

F5 BIG-IP APM client svpn component design vulnerability

F5 BIG-IP APM client is the client software in a suite of access and security solutions from F5 USA. The software provides unified access to business-critical applications and networks. svpn component is one of the VPN components. A security vulnerability exists in the svpn component of the F5...

CVE-2018-5529

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for Linux and Mac OS X runs as a privileged process and can allow an unprivileged user to assume super-user privileges on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information,...

Design/Logic Flaw

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for Linux and Mac OS X runs as a privileged process and can allow an unprivileged user to assume super-user privileges on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information,...

CVE-2018-5529

The CVE-2018-5529 entry concerns the svpn component of the F5 BIG-IP APM client for Linux and macOS, vulnerable prior to version 7.1.7. The issue arises because svpn runs as a privileged process, enabling a local unprivileged user to gain super-user privileges on the local client host, potentiall...

CVE-2018-5529

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for Linux and Mac OS X runs as a privileged process and can allow an unprivileged user to assume super-user privileges on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information,...

CVE-2018-5529: Undefined Security Weakness

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for Linux and Mac OS X runs as a privileged process and can allow an unprivileged user to assume super-user privileges on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information,...

PT-2018-17023

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM client versions prior to 7.1.7 for Linux and Mac OS X Description The issue allows an unprivileged user to assume super-user privileges on the local client host, potentially gaining access to sensitive information, manipulating...

PT-2018-17021

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 13.1.0 through 13.1.0.7 Description A remote attacker can force the Traffic Management Microkernel tmm to leak memory on virtual servers configured with a Client SSL or Server SSL profile that has the SSL Forward Proxy featu...