Authentication flaw

On F5 BIG-IP versions 13.0.0 - 13.1.0.3, attackers may be able to disrupt services on the BIG-IP system with maliciously crafted client certificate. This vulnerability affects virtual servers associated with Client SSL profile which enables the use of client certificate authentication. Client...

CVE-2018-5509

On F5 BIG-IP versions 13.0.0 or 12.1.0 - 12.1.3.1, when a specifically configured virtual server receives traffic of an undisclosed nature, TMM will crash and take the configured failover action, potentially causing a denial of service. The configuration which exposes this issue is not common and...

CVE-2018-5505

On F5 BIG-IP versions 13.1.0 - 13.1.0.3, when ASM and AVR are both provisioned, TMM may restart while processing DNS requests when the virtual server is configured with a DNS profile and the Protocol setting is set to TCP...

Remote code execution

In some circumstances, the Traffic Management Microkernel TMM does not properly handle certain malformed Websockets requests/responses, which allows remote attackers to cause a denial-of-service DoS or possible remote code execution on the F5 BIG-IP system running versions 13.0.0 - 13.1.0.3 or...

Deserialization of untrusted data

On F5 BIG-IP versions 13.0.0 - 13.1.0.3 or 12.0.0 - 12.1.3.1, TMM may restart when processing a specifically crafted page through a virtual server with an associated PEM policy that has content insertion as an action...

CVE-2018-5505

CVE-2018-5505 affects F5 BIG-IP when ASM and AVR (Analytics) modules are provisioned and the DNS profile with Protocol TCP is used. On BIG-IP 13.1.0–13.1.0.3, TMM may restart while processing DNS requests, potentially enabling remote Denial of Service. The advisory notes AVR is automatically enab...

CVE-2018-5504

CVE-2018-5504 affects F5 BIG-IP TMM WebSocket handling. Affects BIG-IP 12.x (12.1.0–12.1.3.1/12.1.3.2 fix), 13.x (13.0.0–13.1.0 with fix in 13.1.0.4), and 14.x shows fixes in 14.0.0. Root cause: malformed WebSocket requests/responses processing leading to DoS or possible remote code execution. Im...

CVE-2018-5503

CVE-2018-5503 affects F5 BIG-IP PEM with content insertion actions in PEM policies. A crafted page processed through a virtual server can cause TMM to restart, yielding a remote DoS. Affected versions: BIG-IP PEM in 13.x (13.0.0–13.1.0.3) and 12.x (12.0.0–12.1.3.1). Fixes introduced in 13.x: 13.1...

CVE-2018-5502

On F5 BIG-IP versions 13.0.0 - 13.1.0.3, attackers may be able to disrupt services on the BIG-IP system with maliciously crafted client certificate. This vulnerability affects virtual servers associated with Client SSL profile which enables the use of client certificate authentication. Client...

CVE-2018-5509

On F5 BIG-IP versions 13.0.0 or 12.1.0 - 12.1.3.1, when a specifically configured virtual server receives traffic of an undisclosed nature, TMM will crash and take the configured failover action, potentially causing a denial of service. The configuration which exposes this issue is not common and...

CVE-2018-5505

On F5 BIG-IP versions 13.1.0 - 13.1.0.3, when ASM and AVR are both provisioned, TMM may restart while processing DNS requests when the virtual server is configured with a DNS profile and the Protocol setting is set to TCP...

CVE-2018-5504

In some circumstances, the Traffic Management Microkernel TMM does not properly handle certain malformed Websockets requests/responses, which allows remote attackers to cause a denial-of-service DoS or possible remote code execution on the F5 BIG-IP system running versions 13.0.0 - 13.1.0.3 or...

CVE-2018-5502

Summary (CVE-2018-5502) Affected product: F5 BIG-IP (LTM, etc.) with Client SSL profile handling client certificates. What’s vulnerable: BIG-IP virtual servers using a Client SSL profile that enables client certificate authentication. The vulnerability, stemming from how the system handles crafte...

CVE-2018-5509

CVE-2018-5509 affects F5 BIG-IP TMOS (TMM) where a specifically configured virtual server receiving non-TCP/non-standard traffic can cause TMM to crash, triggering a failover and potentially a DoS. Public docs in connected items specify a data-plane exposure only, with vulnerable versions 12.1.0–...

CVE-2018-5503

On F5 BIG-IP versions 13.0.0 - 13.1.0.3 or 12.0.0 - 12.1.3.1, TMM may restart when processing a specifically crafted page through a virtual server with an associated PEM policy that has content insertion as an action...

CVE-2018-5502: Improper Certificate Validation

On F5 BIG-IP versions 13.0.0 - 13.1.0.3, attackers may be able to disrupt services on the BIG-IP system with maliciously crafted client certificate. This vulnerability affects virtual servers associated with Client SSL profile which enables the use of client certificate authentication. Client...

CVE-2018-5505: Undefined Security Weakness

On F5 BIG-IP versions 13.1.0 - 13.1.0.3, when ASM and AVR are both provisioned, TMM may restart while processing DNS requests when the virtual server is configured with a DNS profile and the Protocol setting is set to TCP...

PT-2018-16997

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 12.0.0 through 12.1.3.1 F5 BIG-IP versions 13.0.0 through 13.1.0.3 Description The issue occurs when the Traffic Management Microkernel TMM processes a specifically crafted page through a virtual server with an associated...

CVE-2018-5504: Undefined Security Weakness

In some circumstances, the Traffic Management Microkernel TMM does not properly handle certain malformed Websockets requests/responses, which allows remote attackers to cause a denial-of-service DoS or possible remote code execution on the F5 BIG-IP system running versions 13.0.0 - 13.1.0.3 or...

CVE-2018-5503: Improper Input Validation

On F5 BIG-IP versions 13.0.0 - 13.1.0.3 or 12.0.0 - 12.1.3.1, TMM may restart when processing a specifically crafted page through a virtual server with an associated PEM policy that has content insertion as an action...