CVE-2018-5501

Summary of CVE-2018-5501 : F5 BIG-IP DNS TCP virtual server is affected by a vulnerability caused by a TCP DNS profile that allows excessive buffering due to lack of flow control. Affected BIG-IP versions include 13.0.0; 12.1.0–12.1.3.1; 11.6.x; 11.5.x; and 11.2.1. The impact can be performance d...

CVE-2017-6150

Under certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles, when the Reassemble IP Fragments option is disabled default, some specific large fragmented packets may restart the Traffic Management Microkernel TMM...

CVE-2017-6150

CVE-2017-6150 affects F5 BIG-IP, specifically the TMM component when using FastL4 profiles. Under conditions where Reassemble IP Fragments is disabled, certain large fragmented packets may cause the Traffic Management Microkernel to restart, enabling a DoS scenario. Affected versions include BIG-...

CVE-2018-5500

On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, every Multipath TCP MCTCP connection established leaks a small amount of memory. Virtual server using TCP profile with Multipath TCP MCTCP feature enabled will be affected by this issue...

CVE-2017-6154

On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memory under some circumstances when processing undisclosed types of data on systems with 48 or more CPU cores...

CVE-2018-5501

In some circumstances, on F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, any 11.6.x or 11.5.x release, or 11.2.1, TCP DNS profile allows excessive buffering due to lack of flow control...

PT-2018-8298

Name of the Vulnerable Software and Affected Versions F5 BIG-IP systems versions 12.1.0 through 12.1.3.1 F5 BIG-IP systems version 13.0.0 Description The issue affects F5 BIG-IP systems under certain conditions when using FastL4 profiles and the Reassemble IP Fragments option is disabled. In such...

CVE-2017-6154: Improper Input Validation

On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memory under some circumstances when processing undisclosed types of data on systems with 48 or more CPU cores...

CVE-2018-5500: Uncontrolled Resource Consumption

On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, every Multipath TCP MCTCP connection established leaks a small amount of memory. Virtual server using TCP profile with Multipath TCP MCTCP feature enabled will be affected by this issue...

CVE-2017-6150: Improper Input Validation

Under certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles, when the Reassemble IP Fragments option is disabled default, some specific large fragmented packets may restart the Traffic Management Microkernel TMM...

PT-2018-8301

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.6.1 through 11.6.2 F5 BIG-IP versions 12.1.0 through 12.1.3.1 F5 BIG-IP version 13.0.0 Description The issue occurs on F5 BIG-IP systems when the BIG-IP ASM bd daemon processes certain types of data on systems with 48 or...

PT-2018-16994

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.6.1 through 11.6.2 F5 BIG-IP versions 12.1.0 through 12.1.3.1 F5 BIG-IP version 13.0.0 Description The issue affects F5 BIG-IP systems where every Multipath TCP MCTCP connection established leaks a small amount of memory...

PT-2018-16995

Name of the Vulnerable Software and Affected Versions F5 BIG-IP systems versions 11.2.1 F5 BIG-IP systems versions 11.5.x F5 BIG-IP systems versions 11.6.x F5 BIG-IP systems versions 12.1.0 through 12.1.3.1 F5 BIG-IP systems version 13.0.0 Description The issue is related to the TCP DNS profile,...

CVE-2018-5501: Uncontrolled Resource Consumption

In some circumstances, on F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, any 11.6.x or 11.5.x release, or 11.2.1, TCP DNS profile allows excessive buffering due to lack of flow control...

CVE-2017-6169

In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel TMM to produce a core file when it receives malformed URLs during categorization...

Design/Logic Flaw

In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel TMM to produce a core file when it receives malformed URLs during categorization...

CVE-2017-6169

In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel TMM to produce a core file when it receives malformed URLs during categorization...

CVE-2017-6169

In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel TMM to produce a core file when it receives malformed URLs during categorization...

CVE-2017-6169

CVE-2017-6169 affects F5 BIG-IP: vulnerable in BIG-IP with PEM provisioned and URL categorization enabled when processing malformed URLs, causing Traffic Management Microkernel (TMM) to produce a core file. Affected versions include 13.0.0, 12.0.0–12.1.3, and 11.6.0–11.6.2. The F5 advisory lists ...

CVE-2017-6169: Improper Input Validation

In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel TMM to produce a core file when it receives malformed URLs during categorization...