F5 Networks BIG-IP : BIG-IP management vulnerability (K55792317)

In F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user with access to the control plane may be able to delete arbitrary files through an undisclosed mechanism. CVE-2016-9250 Impact An unauthenticated user with access to the management control plane may be...

F5 Networks BIG-IP : Linux kernel vulnerability (K68852819)

Race condition in the L2TPv3 IP Encapsulation feature in the Linux kernel before 4.8.14 allows local users to gain privileges or cause a denial of service use-after-free by making multiple bind system calls without properly ascertaining whether a socket has the SOCKZAPPED status, related to...

F5 Networks BIG-IP : Linux kernel vulnerability (K20022580)

Use-after-free vulnerability in net/unix/afunix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AFUNIX socket permissions or cause a denial of service panic via crafted epollctl calls. CVE-2013-7446 C Tenable Network Security, Inc. The descriptive text and package checks ...

Code injection

An attacker may be able to cause a denial-of-service DoS attack against the sshd component in F5 BIG-IP, Enterprise Manager, BIG-IQ, and iWorkflow...

CVE-2017-6128

An attacker may be able to cause a denial-of-service DoS attack against the sshd component in F5 BIG-IP, Enterprise Manager, BIG-IQ, and iWorkflow...

CVE-2017-6128

An attacker may be able to cause a denial-of-service DoS attack against the sshd component in F5 BIG-IP, Enterprise Manager, BIG-IQ, and iWorkflow...

CVE-2017-6128

CVE-2017-6128 affects F5 BIG‑IP family (sshd DoS). The advisory lists multiple products (BIG‑IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, PSM, WebSafe, WebAccelerator, iWorkflow, BIG‑IQ components, and related management interfaces) with specific vulne...

PT-2017-16901

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Enterprise Manager affected versions not specified BIG-IQ affected versions not specified iWorkflow affected versions not specified Description An attacker may be able to cause a denial-of-service DoS...

CVE-2017-6128: Undefined Security Weakness

An attacker may be able to cause a denial-of-service DoS attack against the sshd component in F5 BIG-IP, Enterprise Manager, BIG-IQ, and iWorkflow...

F5 SSL Intercept iApp Command Execution Vulnerability

F5 SSL Intercept iApp is a set of templates from F5 USA for configuring security appliances for decrypting SSL traffic outbound in LTM. A security vulnerability exists in F5 SSL Intercept iApp versions 1.5.0 through 1.5.7. A remote attacker could exploit the vulnerability to modify the BIG-IP...

F5 Networks BIG-IP : Linux kernel vulnerability (K22012502)

The cpreportfixup function in drivers/hid/hid-cypress.c in the Linux kernel 4.x before 4.9.4 allows physically proximate attackers to cause a denial of service integer underflow or possibly have unspecified other impact via a crafted HID report. CVE-2017-7273 C Tenable Network Security, Inc. The...

F5 Networks BIG-IP : F5 management sshd vulnerability (K92140924)

An undisclosed traffic pattern received on an F5 management interface may cause the Secure Shell Daemon sshd to stop responding, resulting in a Denial-of-Service DoS. CVE-2017-6128 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from F5...

F5 Networks BIG-IP : Linux kernel vulnerability (K60104355)

The ipv4pktinfoprepare function in net/ipv4/ipsockglue.c in the Linux kernel through 4.9.9 allows attackers to cause a denial of service system crash via 1 an application that makes crafted system calls or possibly 2 IPv4 traffic with invalid IP options. CVE-2017-5970 Impact This vulnerability ma...

Authentication flaw

The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider SP connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authentication request from an...

CVE-2016-7467

The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider SP connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authentication request from an...

CVE-2016-7467

The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider SP connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authentication request from an...

CVE-2016-7467

The CVE-2016-7467 issue affects F5 BIG-IP APM when the TMM SSO plugin is used as a SAML IdP with an SP connector. A malformed, signed SAML authentication request from an authenticated user can disrupt traffic or trigger failover. Affected versions include BIG-IP APM 12.0.0–12.1.1, 11.6.0–11.6.1 H...

CVE-2016-7467: Improper Input Validation

The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider SP connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authentication request from an...

PT-2017-9192

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM versions 11.5.4 through 11.5.4 HF2 F5 BIG-IP APM versions 11.6.0 through 11.6.1 HF1 F5 BIG-IP APM versions 12.0.0 through 12.1.1 Description The TMM SSO plugin in F5 BIG-IP APM, when configured as a SAML Identity Provider with a...

F5 Networks BIG-IP : Mailx vulnerabilities (K16945)

CVE-2014-7844 The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell meta characters in an email address. CVE-2004-2771 A flaw was found in the way mailx handled the parsing of email addresses...