CVE-2018-5506: Undefined Security Weakness

In F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, or 11.2.1 the Apache modules apacheauthtokenmod and modauthf5authtoken.cpp allow possible unauthenticated bruteforce on the emserverip authorization parameter to obtain which SSL client certificates used for mutual authentication between...

PT-2018-17004

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.4 HF4 through 11.5.5 Description The issue occurs when the Traffic Management Microkernel TMM processes a specific sequence of packets on IPv6 virtual servers, which may cause the TMM to restart. Recommendations For F5...

PT-2018-8294

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.0 through 11.5.5 F5 BIG-IP versions 11.6.0 through 11.6.2 F5 BIG-IP versions 12.0.0 through 12.1.2 Description The issue arises from incorrect implementation of X509 certificate verification in the IP Intelligence...

PT-2018-17005

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 13.0.0 F5 BIG-IP versions 13.1.0 through 13.1.0.3 Description The issue affects authenticated administrative users who execute commands in the Traffic Management User Interface TMUI, also known as the BIG-IP Configuration...

CVE-2017-6155: Undefined Security Weakness

On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or HTTP/2 requests may result in a disruption of service to TMM. Data plane is only exposed when a SPDY or HTTP/2 profile is attached to a virtual server. There is no control plane exposure...

PT-2018-17001

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.1 through 11.5.5 F5 BIG-IP versions 11.6.1 through 11.6.2 F5 BIG-IP versions 12.1.0 through 12.1.3.1 F5 BIG-IP version 13.0.0 Description The issue affects vCMP guests running on VIPRION 2100, 4200, and 4300 series...

CVE-2017-6148: Improper Input Validation

Responses to SOCKS proxy requests made through F5 BIG-IP version 13.0.0, 12.0.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5 may cause a disruption of services provided by TMM. The data plane is impacted and exposed only when a SOCKS proxy profile is attached to a Virtual Server. The control plane i...

PT-2018-8304

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.2.1 F5 BIG-IP versions 11.5.1 through 11.5.5 F5 BIG-IP versions 11.6.0 through 11.6.1 F5 BIG-IP versions 12.0.0 through 12.1.2 Description The issue is related to the handling of invalid IP addresses in TMM. Recommendatio...

CVE-2018-5507: Undefined Security Weakness

On F5 BIG-IP versions 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5, vCMP guests running on VIPRION 2100, 4200 and 4300 series blades cannot correctly decrypt ciphertext from established SSL sessions with small MTU...

CVE-2018-5510: Improper Input Validation

On F5 BIG-IP 11.5.4 HF4-11.5.5, the Traffic Management Microkernel TMM may restart when processing a specific sequence of packets on IPv6 virtual servers...

CVE-2017-6158: Undefined Security Weakness

In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling of invalid IP addresses...

CVE-2017-6143: Improper Certificate Validation

X509 certificate verification was not correctly implemented in the IP Intelligence Subscription and IP Intelligence feed-list features, and thus the remote server's identity is not properly validated in F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.2, or 11.5.0-11.5.5...

PT-2018-8296

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.1 through 11.5.5 F5 BIG-IP versions 11.6.1 through 11.6.2 F5 BIG-IP versions 12.0.0 through 12.1.3.1 F5 BIG-IP version 13.0.0 Description The issue affects the data plane when a SOCKS proxy profile is attached to a...

PT-2018-8303

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.2.1 F5 BIG-IP versions 11.5.1 through 11.5.5 F5 BIG-IP versions 11.6.0 through 11.6.1 F5 BIG-IP versions 12.1.0 through 12.1.1 Description The issue allows a remote attacker to disrupt or impersonate tunnels that have...

CVE-2017-6156: Undefined Security Weakness

When the F5 BIG-IP 12.1.0-12.1.1, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 system is configured with a wildcard IPSec tunnel endpoint, it may allow a remote attacker to disrupt or impersonate the tunnels that have completed phase 1 IPSec negotiations. The attacker must possess the necessary...

CVE-2018-5508: Undefined Security Weakness

On F5 BIG-IP PEM versions 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.5.1-11.5.5, or 11.2.1, under certain conditions, TMM may crash when processing compressed data though a Virtual Server with an associated PEM profile using the content insertion option...

PT-2018-17000

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.2.1 F5 BIG-IP versions 11.5.1 through 11.5.5 F5 BIG-IP versions 11.6.1 F5 BIG-IP versions 12.1.0 through 12.1.2 F5 BIG-IP version 13.0.0 Description The issue allows possible unauthenticated bruteforce on the em server ip...

PT-2018-8302

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.2.1 F5 BIG-IP versions 11.4.1 through 11.5.5 F5 BIG-IP versions 11.6.0 through 11.6.2 F5 BIG-IP versions 12.0.0 through 12.1.3.1 F5 BIG-IP version 13.0.0 Description The issue arises from malformed SPDY or HTTP/2 requests...

CVE-2018-5511: Use of Externally-Controlled Input to Select Classes or Code

On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface TMUI, also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced...

PT-2018-17002

Name of the Vulnerable Software and Affected Versions F5 BIG-IP PEM versions 11.2.1, 11.5.1 through 11.5.5, 11.6.0 through 11.6.2, 12.0.0 through 12.1.3.1, 13.0.0 Description The issue occurs when TMM processes compressed data through a Virtual Server with an associated PEM profile that uses the...