CVE-2017-6140

On the BIG-IP 2000s, 2200s, 4000s, 4200v, i5600, i5800, i7600, i7800, i10600,i10800, and VIPRION 4450 blades, running version 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 or 12.1.2 of BIG-IP LTM, AAM, AFM, Analytics, ASM, DNS, GTM or PEM, an undisclosed sequence ...

CVE-2017-0301

CVE-2017-0301 affects F5 BIG-IP APM in versions 11.5.0–12.1.2 where portal access requests may not return the intended resources, potentially allowing access to internal BIG-IP APM resources while application and backend resources remain unaffected. The vulnerability is documented by F5 in K54358...

CVE-2017-6134

The vulnerability CVE-2017-6134 affects F5 BIG-IP BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe across 11.x, 12.x, and 13.x branches. An undisclosed sequence of packets from an adjacent network can cause the Traffic Management Microkernel (TMM) to crash, po...

PT-2017-16926

Name of the Vulnerable Software and Affected Versions F5 BIG-IP software versions 12.1.0 through 12.1.2 F5 BIG-IP software version 13.0.0 Description The issue is related to race conditions in iControl REST, which may cause commands to be executed with different privilege levels than expected...

CVE-2017-6132: Improper Input Validation

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 and 11.5.0 - 11.5.4, an undisclosed sequence of packets sent to BIG-IP High Availability state mirror listeners primary and/or secondary IP may...

F5 Networks BIG-IP : NTP vulnerability (K02951273)

NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service daemon crash via an invalid setting in a :config directive, related to the unpeer option. CVE-2017-6463 C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

F5 Networks BIG-IP : NTP vulnerability (K32262483)

The mx4200send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write...

F5 Networks BIG-IP : LibTIFF vulnerability (K11220361)

The NeXTDecode function in tifnext.c in LibTIFF allows remote attackers to cause a denial of service uninitialized memory access via a crafted TIFF image, as demonstrated by libtiff5.tif. CVE-2015-1547 Impact This vulnerability allows a remote attacker to cause a denial-of-service DoS attack.BIG-...

CVE-2017-6167: Concurrent Execution using Shared Resource with Improper Synchronization

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, race conditions in iControl REST may lead to commands being executed with different privilege levels than expected...

PT-2017-16923

Name of the Vulnerable Software and Affected Versions F5 BIG-IP software versions 11.5.0 through 11.5.4 F5 BIG-IP software versions 11.6.0 through 11.6.1 F5 BIG-IP software versions 12.0.0 through 12.1.2 F5 BIG-IP software version 13.0.0 Description The issue arises from the Traffic Management...

CVE-2017-6164: Improper Input Validation

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, 12.0.0 - 12.1.2, 11.6.0 - 11.6.1 and 11.5.0 - 11.5.4, in some circumstances, Traffic Management Microkernel TMM does not properly handle certain...

CVE-2017-6133: Improper Input Validation

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, undisclosed HTTP requests may cause a denial of service...

PT-2017-10507

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM software versions 11.5.0 through 11.5.4 F5 BIG-IP APM software versions 11.6.0 through 11.6.1 F5 BIG-IP APM software versions 12.0.0 through 12.1.2 Description The issue affects the BIG-IP APM portal, where access requests may no...

CVE-2017-6138: Improper Input Validation

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of...

CVE-2017-6139: Insertion of Sensitive Information into Log File

In F5 BIG-IP APM software version 13.0.0 and 12.1.2, under rare conditions, the BIG-IP APM system appends log details when responding to client requests. Details in the log file can vary; customers running debug mode logging with BIG-IP APM are at highest risk...

CVE-2017-6151: Undefined Security Weakness

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, undisclosed requests made to BIG-IP virtual servers which make use of the "HTTP/2 profile" may result in a disruption of service to TMM...

PT-2017-16904

Name of the Vulnerable Software and Affected Versions F5 BIG-IP software versions 13.0.0, 12.0.0 through 12.1.2, 11.6.0 through 11.6.1, 11.5.0 through 11.5.4 Description The issue arises when an undisclosed sequence of packets is sent to BIG-IP High Availability state mirror listeners, potentiall...

CVE-2017-6136: Improper Input Validation

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.0.0 - 12.1.2, undisclosed traffic patterns sent to BIG-IP virtual servers, with the TCP Fast Open and Tail Loss Probe options enabled in the associated TCP profile, may cause...

PT-2017-16902

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM software versions 12.1.2 and 13.0.0 Description The issue arises in certain circumstances where APM tunneled VPN flows can cause premature freeing of a VPN/PPP connflow or make TMM stop responding with a "flow not in use"...

PT-2017-16908

Name of the Vulnerable Software and Affected Versions F5 BIG-IP software versions 12.0.0 through 12.1.2 F5 BIG-IP software version 13.0.0 Description The issue affects F5 BIG-IP when undisclosed traffic patterns are sent to BIG-IP virtual servers with specific TCP profile settings enabled,...