F5 Networks BIG-IP : TMM vulnerability (K55102452)

Undisclosed sequence of packets sent to Virtual Servers with client or server SSL profiles using AES-GCM cipher suitesmay cause disruption of data plane services. CVE-2017-6140 This vulnerability affects the following BIG-IP platforms:2000s,2200s,4000s,4200v,i5600, i5800,i7600, i7800,i10600,...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K77671456)

The Traffic Management Microkernel TMM may restart when processing a specific sequence of packets on IPv6 virtual servers. CVE-2018-5510 Note : This vulnerability does not affect IPv4 virtual servers. Impact The Traffic Management Microkernel TMM generates a core file and restarts. If configured ...

F5 Networks BIG-IP : TMM vulnerability (K37404773)

An undisclosed sequence of packets, sourced from an adjacent network may cause TMM to crash.CVE-2017-6134 Impact This issue is exposed in the default configuration. Traffic processing is disrupted while the Traffic Management Microkernel TMM restarts. If the affected F5 device is configured as pa...

F5 Networks BIG-IP : TMM vulnerability (K46940010)

A malformed Transport Layer Security TLS handshake causes the Traffic Management Microkernel TMM to stop responding, leading to a disruption of service. This issue is only exposed on the data plane when a Proxy SSL configuration is enabled. The control plane is not impacted by this issue...

F5 Networks BIG-IP : TMM with LRO vulnerability (K07550539)

When Large Receive Offload LRO is enabled, undisclosed traffic patterns may cause TMM to restart. LRO has been available since 11.4.0 but is not enabled by default until13.1.0 for all platformsand 12.0.0 for Virtual Edition. CVE-2018-15311 Impact An attacker may be able to disrupt traffic or caus...

F5 Networks BIG-IP : TMM vulnerability (K81137982)

Undisclosed traffic patterns sent to BIG-IP virtual servers, with the TCP Fast Open and Tail Loss Probe options enabled in the associated TCP profile, may cause a disruption of service to the Traffic Management Microkernel TMM. CVE-2017-6136 Impact An attacker may be able to disrupt traffic or...

F5 Networks BIG-IP : TMM vulnerability (K43625118)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.3.3 / 12.1.5 / 13.1.3 / 14.0.0.3 / 14.1.0. It is, therefore, affected by a vulnerability as referenced in the K43625118 advisory. - In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an...

F5 Networks BIG-IP : TMM with HTTP/2 vulnerability (K45320419)

Maliciously crafted HTTP/2 request frames can lead to denial of service. There is data plane exposure for virtual servers when the HTTP2 profile is enabled. There is no control plane exposure to this issue. CVE-2018-5514 Impact The BIG-IP system may temporarily fail to process traffic as it...

F5 Networks BIG-IP : SSL forward proxy vulnerability (K45325728)

Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic. CVE-2018-5533 Impact This vulnerability may allow a remote attacker to cause the Traffic Management Microkernel TMM to produce a corefile,...

F5 Networks BIG-IP : RADIUS authentication vulnerability (K62750376)

Using RADIUS authentication responses from a RADIUS server with IPv6 addresses may cause TMM to crash, leading to a failover event. CVE-2018-5515 Impact BIG-IP When a BIG-IP system receives a RADIUS authentication response from a IPv6 RADIUS server, the affected system produces a Traffic Manageme...

F5 Networks BIG-IP : TMM vulnerability (K33211839)

Every Multipath TCP MCTCP connection established leaks a small amount of memory. Virtual server using TCP profile with Multipath TCP MCTCP feature enabled will be affected by this issue. CVE-2018-5500 Impact Over a period of time, the memory leak may lead to memory exhaustion on the system. The...

F5 Networks BIG-IP : TMM vulnerability (K34514540)

Malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings. The issue is also exposed with the non-default 'normalize URI' configuration options used in iRules and/or BIG-IP LTM policies...

F5 Networks BIG-IP : BIG-IP SOCKS proxy vulnerability (K55225440)

Responses to SOCKS proxy requests made through the BIG-IP system may cause a disruption of service provided by theTraffic Management Microkernel TMM. The data plane is impacted and exposed only when a SOCKS proxy profile is attached to a virtual server. The control plane is not impacted by this...

F5 Networks BIG-IP : TMM vulnerability (K45611803)

F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.1 virtual servers with HTTP/2 profiles enabled are vulnerable to 'HPACK Bomb'. CVE-2018-5530 Impact HPACK bombs are designed to consume an abnormal amount of memory resources on a target system, which can result in a denial of service...

F5 Networks BIG-IP : SSL forward proxy vulnerability (K64552448)

Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic. CVE-2018-5534 Impact This vulnerability may allow a remote attacker to cause the Traffic Management Microkernel TMM to produc...

F5 Networks BIG-IP : TMM vulnerability (K72442354)

Undisclosed traffic patterns may lead to denial of service conditions for the BIG-IP system. The configuration which exposes this condition is the BIG-IP self IP address which is part of a VLAN group and has the Port Lockdown setting configured with anything other than 'allow-all'. CVE-2018-15320...

F5 Networks BIG-IP : TMM vulnerability (K52167636)

Features in the BIG-IP system that utilizeinflate functionality directly, via an iRule, or via the inflate code from PEM module are subjected to a service disruption via a 'Zip Bomb' attack.CVE-2017-6153 Impact BIG-IP systems deployed in Forward Proxy mode with the inflate functionality enabled a...

F5 Networks BIG-IP : TMM vulnerability (K27044729)

Under certain conditions, theTraffic Management Microkernel TMM may restart and produce a core file while processing BIG-IP APM data. CVE-2018-5528 Impact This vulnerability allows remote attackers to cause a denial of service DoS on the BIG-IP system. The BIG-IP system will temporarily fail to...

F5 Networks BIG-IP : TMM vulnerability (K25033460)

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, undisclosed HTTP requests may cause a denial of service. CVE-2017-6133 Impact The Traffic Management Microkernel TMM generates a core file and restarts. The BIG-IP...

F5 Networks BIG-IP : TMM vulnerability (K12044607)

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 and 11.5.0 - 11.5.4, an undisclosed sequence of packets sent to BIG-IP High Availability state mirror listeners primary and/or secondary IP may...