EUVD-2020-20217

Malware in sbrugna...

CVE-2021-23000

On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2, if the tmm.http.rfc.enforcement BigDB key is enabled in a BIG-IP system, or the Bad host header value is checked in the AFM HTTP security profile associated with a virtual server, in rare instances, a specific sequence of malicious requests may...

Code injection

On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2, if the tmm.http.rfc.enforcement BigDB key is enabled in a BIG-IP system, or the Bad host header value is checked in the AFM HTTP security profile associated with a virtual server, in rare instances, a specific sequence of malicious requests may...

PT-2021-15327

Name of the Vulnerable Software and Affected Versions BIG-IP versions 13.1.3.4 through 13.1.3.6 BIG-IP version 12.1.5.2 Description A specific sequence of malicious requests may cause TMM to restart in rare instances if the tmm.http.rfc.enforcement BigDB key is enabled or the Bad host header valu...

PT-2020-16775

Name of the Vulnerable Software and Affected Versions BIG-IP version 13.1.3.4 Description The issue occurs when a BIG-IP AFM HTTP security profile is applied to a virtual server and the system receives a request with specific characteristics, causing the connection to reset and the Traffic...

CVE-2020-27713: Missing Release of Memory after Effective Lifetime

In certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied to a virtual server and the BIG-IP system receives a request with specific characteristics, the connection is reset and the Traffic Management Microkernel TMM leaks memory...