CVE-2021-23011

On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, when the BIG-IP system is buffering packet fragments for reassembly, the Traffic Management Microkernel TMM may consume an excessive amount of...

PT-2021-15340

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 12.1.x through 12.1.5.2 F5 BIG-IP versions 13.1.x through 13.1.3.5 F5 BIG-IP versions 14.1.x through 14.1.3 F5 BIG-IP versions 15.1.x through 15.1.2 F5 BIG-IP versions 16.0.x through 16.0.0 Description The Traffic Management...

PT-2021-15338

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.6.x before 11.6.5.3 F5 BIG-IP versions 12.1.x before 12.1.6 F5 BIG-IP versions 13.1.x before 13.1.4 F5 BIG-IP versions 14.1.x before 14.1.4 F5 BIG-IP versions 15.1.x before 15.1.3 F5 BIG-IP versions 16.0.x before 16.0.1.1...

CVE-2021-23013: Undefined Security Weakness

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, the Traffic Management Microkernel TMM may stop responding when processing Stream Control Transmission Protocol SCTP traffic under certain conditions. This...

CVE-2021-23011: Uncontrolled Resource Consumption

On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, when the BIG-IP system is buffering packet fragments for reassembly, the Traffic Management Microkernel TMM may consume an excessive amount of...

CVE-2021-0270

On PTX Series and QFX10k Series devices with the "inline-jflow" feature enabled, a use after free weakness in the Packet Forwarding Engine PFE microkernel architecture of Juniper Networks Junos OS may allow an attacker to cause a Denial of Service DoS condition whereby one or more Flexible PIC...

Race condition

On PTX Series and QFX10k Series devices with the "inline-jflow" feature enabled, a use after free weakness in the Packet Forwarding Engine PFE microkernel architecture of Juniper Networks Junos OS may allow an attacker to cause a Denial of Service DoS condition whereby one or more Flexible PIC...

CVE-2021-0270

CVE-2021-0270 impacts Juniper Networks Junos OS on PTX Series and QFX10K Series when the inline-Jflow feature is enabled. The issue is described as a use-after-free in the Packet Forwarding Engine (PFE) microkernel, leading to a DoS through restarting one or more FPCs and generating core files du...

CVE-2021-0270 Junos OS: PTX Series, QFX10K Series: A PTX/QFX FPC may restart unexpectedly with the "inline-Jflow" feature enabled on a large-scale deployment

On PTX Series and QFX10k Series devices with the "inline-jflow" feature enabled, a use after free weakness in the Packet Forwarding Engine PFE microkernel architecture of Juniper Networks Junos OS may allow an attacker to cause a Denial of Service DoS condition whereby one or more Flexible PIC...

CVE-2021-0270: Concurrent Execution using Shared Resource with Improper Synchronization

On PTX Series and QFX10k Series devices with the "inline-jflow" feature enabled, a use after free weakness in the Packet Forwarding Engine PFE microkernel architecture of Juniper Networks Junos OS may allow an attacker to cause a Denial of Service DoS condition whereby one or more Flexible PIC...

CVE-2021-23007

On BIG-IP versions 14.1.4 and 16.0.1.1, when the Traffic Management Microkernel TMM process handles certain undisclosed traffic, it may start dropping all fragmented IP traffic. Note: Software versions which have reached End of Software Development EoSD are not evaluated...

Code injection

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, the Traffic Management Microkernel TMM process may produce a core file when undisclosed MPTCP traffic passes through a standard...

PT-2021-15334

Name of the Vulnerable Software and Affected Versions BIG-IP versions 14.1.4 through 16.0.1.1 Description The issue arises when the Traffic Management Microkernel TMM process handles certain undisclosed traffic, causing it to drop all fragmented IP traffic. Recommendations For BIG-IP version...

PT-2021-15330

Name of the Vulnerable Software and Affected Versions BIG-IP versions 11.6.x before 11.6.5.3 BIG-IP versions 12.1.x before 12.1.5.3 BIG-IP versions 13.1.x before 13.1.3.6 BIG-IP versions 14.1.x before 14.1.3.1 BIG-IP versions 15.1.x before 15.1.2 BIG-IP versions 16.0.x before 16.0.1.1 Description...

CVE-2021-22991: Improper Restriction of Operations within the Bounds of a Memory Buffer

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, undisclosed requests to a virtual server may be incorrectly handled by the Traffic Management Microkernel TMM URI normalization, which may trigger a buffer...

CVE-2021-23007: Undefined Security Weakness

On BIG-IP versions 14.1.4 and 16.0.1.1, when the Traffic Management Microkernel TMM process handles certain undisclosed traffic, it may start dropping all fragmented IP traffic. Note: Software versions which have reached End of Software Development EoSD are not evaluated...

CVE-2021-23003: Undefined Security Weakness

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, the Traffic Management Microkernel TMM process may produce a core file when undisclosed MPTCP traffic passes through a standard...

The vulnerability of the Traffic Management Microkernel (TMM) component’s URI in the BIG-IP application security server allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the Traffic Management Microkernel TMM component of the BIG-IP application protection virtual server lies in the lack of security measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause servic...

PT-2021-2406 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 12.1.x through 12.1.5.3 F5 BIG-IP versions 13.1.x through 13.1.3.6 F5 BIG-IP versions 14.1.x through 14.1.4 F5 BIG-IP versions 15.1.x through 15.1.2.1 F5 BIG-IP versions 16.0.x through 16.0.1.1 Description: The issue is...

CVE-2021-22975

On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, and 14.1.x before 14.1.3.1, under some circumstances, Traffic Management Microkernel TMM may restart on the BIG-IP system while passing large bursts of traffic. Note: Software versions which have reached End of Software Development...