CVE-2018-15319

On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with the non-default "normalize URI" configuration options used in iRules and/or BIG-IP LTM policies...

CVE-2018-15318

In BIG-IP 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, or 12.1.3.4-12.1.3.6, If an MPTCP connection receives an abort signal while the initial flow is not the primary flow, the initial flow will remain after the closing procedure is complete. TMM may restart and produce a core file as a result of this...

CVE-2018-15324

CVE-2018-15324 affects BIG-IP APM: specifically TMM may restart when processing a specially crafted request via APM portal access. Affected versions are BIG-IP APM 14.0.0–14.0.0.2 and 13.0.0–13.1.1.1. Remediation per the security advisory is to upgrade to: 14.1.0 (for 14.x) or 13.1.1.2 (for 13.x)...

CVE-2018-15324

On BIG-IP APM 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, TMM may restart when processing a specially crafted request with APM portal access...

CVE-2018-15323

On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, in certain circumstances, when processing traffic through a Virtual Server with an associated MQTT profile, the TMM process may produce a core file and take the configured HA action...

CVE-2018-15317

In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an attacker sending specially crafted SSL records to a SSL Virtual Server will cause corruption in the SSL data structures leading to intermittent decrypt BADRECORDMAC errors. Clients will be unable to access the...

CVE-2018-15319

CVE-2018-15319 affects F5 BIG-IP TMM when HTTP profiles or iRules use the non-default Normalize URI options. Affected: BIG-IP 14.0.0–14.0.0.2, 13.0.0–13.1.1.1, 12.1.0–12.1.3.6. Root cause: certain HTTP URI/Use normalized URI configurations allow malicious requests to trigger TMM restart. Impact: ...

CVE-2018-15318

CVE-2018-15318 affects F5 BIG-IP TMM across multiple releases with an MPTCP abort on a non-primary initial flow causing the initial flow to persist after closing, potentially triggering a TMM restart and a core dump. Affected versions include BIG-IP 14.0.0–14.0.0.2, 13.1.0.4–13.1.1.1, and 12.1.3....

CVE-2018-15324: Improper Input Validation

On BIG-IP APM 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, TMM may restart when processing a specially crafted request with APM portal access...

PT-2018-12968

Name of the Vulnerable Software and Affected Versions BIG-IP versions 13.0.0 through 13.1.1.1 BIG-IP versions 14.0.0 through 14.0.0.2 Description The issue occurs when processing traffic through a Virtual Server with an associated MQTT profile, under certain circumstances, causing the TMM process...

PT-2018-12969

Name of the Vulnerable Software and Affected Versions BIG-IP APM versions 13.0.0 through 13.1.1.1 BIG-IP APM versions 14.0.0 through 14.0.0.2 Description The issue occurs when TMM processes a specially crafted request with APM portal access, potentially causing TMM to restart. Recommendations For...

PT-2018-12963

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 12.1.0 through 12.1.3.6 F5 BIG-IP versions 13.0.0 through 13.1.1.1 F5 BIG-IP versions 14.0.0 through 14.0.0.2 Description The issue allows malicious requests made to virtual servers with an HTTP profile to cause the TMM to...

PT-2018-12962

Name of the Vulnerable Software and Affected Versions BIG-IP versions 12.1.3.4 through 12.1.3.6 BIG-IP versions 13.1.0.4 through 13.1.1.1 BIG-IP versions 14.0.0 through 14.0.0.2 Description The issue occurs when an MPTCP connection receives an abort signal while the initial flow is not the primar...

CVE-2018-15323: Improper Input Validation

On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, in certain circumstances, when processing traffic through a Virtual Server with an associated MQTT profile, the TMM process may produce a core file and take the configured HA action...

PT-2018-12961

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.2.1 through 11.6.3.2 F5 BIG-IP versions 12.1.0 through 12.1.4.1 F5 BIG-IP versions 13.0.0 through 13.1.1.5 F5 BIG-IP versions 14.0.0 through 14.0.0.2 Description The issue arises when an attacker sends specially crafted S...

CVE-2018-15319: Improper Input Validation

On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with the non-default "normalize URI" configuration options used in iRules and/or BIG-IP LTM policies...

CVE-2018-15311

When F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing specially crafted TCP traffic with the Large Receive Offload LRO feature enabled, TMM may crash, leading to a failover event. This vulnerability is not exposed unless LRO is enabled, so most affected...

CVE-2018-15311

When F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing specially crafted TCP traffic with the Large Receive Offload LRO feature enabled, TMM may crash, leading to a failover event. This vulnerability is not exposed unless LRO is enabled, so most affected...

PT-2018-12955

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.1 through 11.5.6 F5 BIG-IP versions 11.6.0 through 11.6.3.2 F5 BIG-IP versions 12.1.0 through 12.1.3.5 F5 BIG-IP versions 13.0.0 through 13.1.0.5 Description The issue occurs when F5 BIG-IP processes specially crafted T...

CVE-2018-15311: Undefined Security Weakness

When F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing specially crafted TCP traffic with the Large Receive Offload LRO feature enabled, TMM may crash, leading to a failover event. This vulnerability is not exposed unless LRO is enabled, so most affected...