F5 Networks BIG-IP : TMM vulnerability (K14632915)

Malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs. CVE-2019-6603 Impact This vulnerability allows remote disruption of...

Code injection

In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, 12.1.0-12.1.3.6, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when processing fragmented ClientHello messages in a DTLS session TMM may corrupt memory eventually leading to a crash. Only systems offering DTLS connections via APM are impacted...

CVE-2019-6592

On BIG-IP 14.1.0-14.1.0.1, TMM may restart and produce a core file when validating SSL certificates in client SSL or server SSL profiles...

Code injection

On BIG-IP 14.1.0-14.1.0.1, TMM may restart and produce a core file when validating SSL certificates in client SSL or server SSL profiles...

CVE-2019-6592

On BIG-IP 14.1.0-14.1.0.1, TMM may restart and produce a core file when validating SSL certificates in client SSL or server SSL profiles...

CVE-2019-6592

CVE-2019-6592 affects BIG-IP 14.1.0–14.1.0.1; when validating SSL certificates in Client SSL or Server SSL profiles, TMM may restart and write a core file. The F5 advisory lists 14.1.0.2 as the fix for this vulnerability and indicates an impact of temporary traffic disruption while TMM restarts. ...

F5 Networks BIG-IP : TMM SSL profile vulnerability (K54167061)

TMM may restart and produce a core file when validating SSL certificates in Client SSL or Server SSL profiles. CVE-2019-6592 Impact BIG-IP The Traffic Management Microkernel TMM may restart and temporarily fail to process traffic. BIG-IQ, Enterprise Manager, F5 iWorkflow, and Traffix SDC There is...

F5 Networks BIG-IP : TMM TLS virtual server vulnerability (K10065173)

A BIG-IP virtual server configured with a Client SSL profile may be vulnerable to a chosen ciphertext attack against CBC ciphers. When exploited, this may result in plaintext recovery of encrypted messages through a man-in-the-middle MITM attack, despite the attacker not having gained access to t...

Design/Logic Flaw

On BIG-IP LTM 13.0.0 to 13.0.1 and 12.1.0 to 12.1.3.6, under certain conditions, the TMM may consume excessive resources when processing SSL Session ID Persistence traffic...

CVE-2019-6590

CVE-2019-6590 affects BIG-IP LTM (TMM) where SSL Session ID Persistence processing can trigger excessive resource use, leading to a denial-of-service. Affected: BIG-IP LTM 13.0.0–13.0.1 and 12.1.0–12.1.3.6. Root cause: TMM resource exhaustion under certain conditions. Impact: potential memory exh...

F5 Networks BIG-IP : TMM vulnerability (K55101404)

Under certain conditions, the TMM may consume excessive resources when processing SSL Session ID Persistence traffic. CVE-2019-6590 Impact BIG-IP This vulnerability may result as a denial-of-service DOS attack on the affected BIG-IP systemwhen the systemconsumes excessive memory resources. This...

F5 Networks BIG-IP : TMM vulnerability (K23328310)

The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.4 / 13.1.1.2 / 14.0.0.3 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K23328310 advisory. - On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, when a virtual server using th...

CVE-2018-15330

On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, when a virtual server using the inflate functionality to process a gzip bomb as a payload, the BIG-IP system will experience a fatal error and may cause the Traffic Management Microkernel TMM to produce a core file...

Code injection

On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, when a virtual server using the inflate functionality to process a gzip bomb as a payload, the BIG-IP system will experience a fatal error and may cause the Traffic Management Microkernel TMM to produce a core file...

CVE-2018-15330

The CVE-2018-15330 issue affects BIG-IP software when a virtual server uses the inflate functionality to process a gzip bomb payload, causing a fatal error and potentially a core file in TMM. Affected versions include BIG-IP 14.0.0–14.0.0.2, 13.0.0–13.1.1.1, and 12.1.0–12.1.3.7. The vulnerability...

F5 Networks BIG-IP : TMM vulnerability (K43625118)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.3.3 / 12.1.5 / 13.1.3 / 14.0.0.3 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K43625118 advisory. - In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an...

F5 Networks BIG-IP : TMM vulnerability (K33211839)

Every Multipath TCP MCTCP connection established leaks a small amount of memory. Virtual server using TCP profile with Multipath TCP MCTCP feature enabled will be affected by this issue. CVE-2018-5500 Impact Over a period of time, the memory leak may lead to memory exhaustion on the system. The...

F5 Networks BIG-IP : TMM vulnerability (K37404773)

An undisclosed sequence of packets, sourced from an adjacent network may cause TMM to crash.CVE-2017-6134 Impact This issue is exposed in the default configuration. Traffic processing is disrupted while the Traffic Management Microkernel TMM restarts. If the affected F5 device is configured as pa...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K77671456)

The Traffic Management Microkernel TMM may restart when processing a specific sequence of packets on IPv6 virtual servers. CVE-2018-5510 Note : This vulnerability does not affect IPv4 virtual servers. Impact The Traffic Management Microkernel TMM generates a core file and restarts. If configured ...

F5 Networks BIG-IP : F5 BIG-IP TMM vulnerability (K31404801)

In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel TMM to produce a core file when it receives malformed URLs during categorization. CVE-2017-6169. Impact An attacker may be able to...