5894 matches found
K000152675: Golang crypto vulnerabilities CVE-2024-24783 and CVE-2025-22866
Security Advisory Description CVE-2024-24783 Verifying a certificate chain which contains a certificate with an unknown public key algorithm will cause Certificate.Verify to panic. This affects all crypto/tls clients, and servers that set Config.ClientAuth to VerifyClientCertIfGiven or...
F5 Networks BIG-IP : c-ares vulnerability (K000149130)
The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.3 / 17.5.1.2. It is, therefore, affected by a vulnerability as referenced in the K000149130 advisory. The c-ares function aresparsenaptrreply, which is used for parsing NAPTR responses, could be...
K000152630: Node.js vulnerability CVE-2025-27210
Security Advisory Description The cve record for the cve id does not exist. CVE-2025-27210 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has evaluated the currently supported releases for potential vulnerability, and...
F5 Networks BIG-IP : Apache Commons vulnerability (K000152614)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.1 / 21.0.0. It is, therefore, affected by a vulnerability as referenced in the K000152614 advisory. Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in...
K000152599: Python tarfile vulnerability CVE-2024-12718
Security Advisory Description Allows modifying some file metadata e.g. last modified with filter="data" or file permissions chmod with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using...
K000152592: Apache Tomcat vulnerability CVE-2025-46701
Security Advisory Description Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet. This issue affects Apache Tomcat: from 11.0.0-M1...
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
CVE-2022-1388 - F5 BIG-IP iControl REST Authentication Bypass...
K000152445: Golang vulnerability CVE-2024-24789
Security Advisory Description The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The...
Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager
CVE-2023-46747 - Big-IP RCE Unauthenticated This is a Pyth...
K000152046: GNOME GLib vulnerability CVE-2024-52533
Security Advisory Description gio/gsocks4aproxy.c in GNOME GLib before 2.82.1 has an off-by-one error and resultant buffer overflow because SOCKS4CONNMSGLEN is not sufficient for a trailing '\0' character. CVE-2024-52533 Impact There is no impact; F5 products are not affected by this vulnerabilit...
K000152033: PHP vulnerability CVE-2024-1874
Security Advisory Description In PHP versions 8.1. before 8.1.28, 8.2. before 8.2.18, 8.3. before 8.3.5, when using procopen command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that wou...
K000152020: elfutils vulnerability CVE-2024-25260
Security Advisory Description elfutils v0.189 was discovered to contain a NULL pointer dereference via the handleverdef function at readelf.c. CVE-2024-25260 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has evaluate...
K000151995: c-ares vulnerability CVE-2025-31498
Security Advisory Description c-ares is an asynchronous resolver library. From 1.32.3 through 1.34.4, there is a use-after-free in readanswers when processanswer may re-enqueue a query either due to a DNS Cookie Failure or when the upstream server does not properly support EDNS, or possibly on TC...
K000151819: PowerDNS vulnerability CVE-2018-16855
Security Advisory Description An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash. CVE-2018-16855 Impact...
K000151779: Node.js vulnerabilities CVE-2025-23083 and CVE-2025-23085
Security Advisory Description CVE-2025-23083 With the aid of the diagnosticschannel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be...
K000151753: Linux kernel vulnerability CVE-2024-38598
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: md: fix resync softlockup when bitmap size is less than array size Is is reported that for dm-raid10, lvextend + lvchange --syncaction will trigger following softlockup: kernel:watchdog: BUG: soft...
K000151739: Linux kernel vulnerability CVE-2024-47745
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: mm: call the securitymmapfile LSM hook in remapfilepages The remapfilepages syscall handler calls dommap directly, which doesn't contain the LSM security check. And if the process has called...
K000151528: Elasticsearch vulnerability CVE-2024-43709
Security Advisory Description An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resulting in a crash via a specially crafted query using an SQL function. CVE-2024-43709 Impact There is no impact; F5 products are not affected by this...
F5 Networks BIG-IP : Python urllib vulnerability (K000151516)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K000151516 advisory. An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injectio...
