PT-2020-18837

Name of the Vulnerable Software and Affected Versions BIG-IP Virtual Edition VE versions 13.1.0 through 13.1.3.4 BIG-IP Virtual Edition VE versions 14.1.0 through 14.1.2.6 BIG-IP Virtual Edition VE versions 15.0.0 through 15.0.1.3 BIG-IP Virtual Edition VE versions 15.1.0 through 15.1.0.3 BIG-IP...

CVE-2020-5946: Undefined Security Weakness

In BIG-IP Advanced WAF and FPS versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, under some circumstances, certain format client-side alerts sent to the BIG-IP virtual server configured with DataSafe may cause the Traffic Management Microkernel TMM to restart, resulting in a...

PT-2020-18839

Name of the Vulnerable Software and Affected Versions BIG-IP versions 15.1.0 through 15.1.0.5 BIG-IP versions 16.0.0 through 16.0.0.1 Description The issue occurs when using the RESOLV::lookup command within an iRule and data exceeding the maximum limit of a hostname is passed to it, causing the...

CVE-2020-5936

On BIG-IP LTM 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.1, the Traffic Management Microkernel TMM process may consume excessive resources when processing SSL traffic and client authentication are enabled on the client SSL profile...

Authentication flaw

On BIG-IP LTM 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.1, the Traffic Management Microkernel TMM process may consume excessive resources when processing SSL traffic and client authentication are enabled on the client SSL profile...

CVE-2020-5936

On BIG-IP LTM 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.1, the Traffic Management Microkernel TMM process may consume excessive resources when processing SSL traffic and client authentication are enabled on the client SSL profile...

CVE-2020-5937

On BIG-IP AFM 15.1.0-15.1.0.5, the Traffic Management Microkernel TMM may produce a core file while processing layer 4 L4 behavioral denial-of-service DoS traffic...

CVE-2020-5937: Undefined Security Weakness

On BIG-IP AFM 15.1.0-15.1.0.5, the Traffic Management Microkernel TMM may produce a core file while processing layer 4 L4 behavioral denial-of-service DoS traffic...

F5 Networks BIG-IP : BIG-IP MQTT iRule vulnerability (K62830532)

When your system handlesMQTT traffic through a BIG-IP virtual server associated with an MQTT profile, and an iRule performs manipulations on that traffic, TMM may produce a core file. CVE-2020-5935 Impact The Traffic Management Microkernel TMM may generate a core file and restart, causing a high...

CVE-2020-5936: Uncontrolled Resource Consumption

On BIG-IP LTM 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.1, the Traffic Management Microkernel TMM process may consume excessive resources when processing SSL traffic and client authentication are enabled on the client SSL profile...

PT-2020-18829

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.6.1 through 11.6.5.2 F5 BIG-IP versions 12.1.0 through 12.1.5.2 F5 BIG-IP versions 13.1.0 through 13.1.3.4 F5 BIG-IP versions 14.1.0 through 14.1.2.3 F5 BIG-IP versions 15.1.0 through 15.1.0.5 Description The issue arises...

F5 Networks BIG-IP : BIG-IP AFM vulnerability (K58290051)

The Traffic Management Microkernel TMM may produce a core file while processing layer 4 L4 behavioral denial-of-service DoS traffic. CVE-2020-5937 Impact The BIG-IP system may temporarily fail to process traffic as it recovers from a TMM restart, and devices configured as a high-availability HA...

PT-2020-18835

Name of the Vulnerable Software and Affected Versions BIG-IP AFM versions 15.1.0 through 15.1.0.5 Description The Traffic Management Microkernel TMM may produce a core file while processing layer 4 L4 behavioral denial-of-service DoS traffic. This issue is related to the processing of specific...

PT-2020-18834

Name of the Vulnerable Software and Affected Versions BIG-IP LTM versions 12.1.0 through 12.1.5.1 BIG-IP LTM versions 13.1.0 through 13.1.3.4 BIG-IP LTM versions 14.1.0 through 14.1.2.7 BIG-IP LTM versions 15.1.0 through 15.1.0.5 Description The issue arises when the Traffic Management Microkerne...

F5 BIG-IP APM Message Handling Denial of Service Vulnerability

The F5 BIG-IP is an F5 load balancing device. A security vulnerability exists in the F5 BIG-IP APM processing session variable, which can be exploited by remote attackers to submit a special request that can cause the TMM to stop responding, resulting in a denial-of-service attack...

CVE-2020-5925

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, undisclosed internally generated UDP traffic may cause the Traffic Management Microkernel TMM to restart under some circumstances...

Code injection

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, undisclosed internally generated UDP traffic may cause the Traffic Management Microkernel TMM to restart under some circumstances...

CVE-2020-5919

In versions 15.1.0-15.1.0.4, rendering of certain session variables by BIG-IP APM UI-based agents in an access profile configured with Modern customization, may cause the Traffic Management Microkernel TMM to stop responding...

Code injection

In versions 15.1.0-15.1.0.4, rendering of certain session variables by BIG-IP APM UI-based agents in an access profile configured with Modern customization, may cause the Traffic Management Microkernel TMM to stop responding...

CVE-2020-5919: Undefined Security Weakness

In versions 15.1.0-15.1.0.4, rendering of certain session variables by BIG-IP APM UI-based agents in an access profile configured with Modern customization, may cause the Traffic Management Microkernel TMM to stop responding...