CVE-2018-5533

Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic...

PT-2018-17029

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.1 through 11.6.3 F5 BIG-IP versions 12.1.0 through 12.1.3 F5 BIG-IP versions 13.0.0 through 13.1.0 F5 BIG-IP version 14.0.0 Description The issue occurs when specifically crafted HTTP responses are processed by a Virtua...

CVE-2018-5532: Undefined Security Weakness

On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be resolved by the cache even after the parent server revokes the record, if the DNS Cache is receiving a stream of requests for the cached name...

CVE-2018-5534: Improper Input Validation

Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic...

PT-2018-17028

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.0 through 11.5.6 F5 BIG-IP versions 11.6.0 through 11.6.3.1 F5 BIG-IP versions 12.1.0 through 12.1.3.1 F5 BIG-IP versions 13.0.0 F5 BIG-IP versions 13.1.0 through 13.1.0.5 Description The issue occurs under certain...

CVE-2018-5533: Improper Input Validation

Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic...

PT-2018-17026

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.2.1 through 11.5.6 F5 BIG-IP versions 11.6.0 through 11.6.3.1 F5 BIG-IP versions 12.1.0 through 12.1.2 F5 BIG-IP version 13.0.0 Description The issue concerns the DNS Cache of TMM, where a cached domain name may still be...

PT-2018-17027

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.0 through 11.5.6 F5 BIG-IP versions 11.6.0 through 11.6.3.1 F5 BIG-IP versions 12.1.0 through 12.1.2 F5 BIG-IP version 13.0.0 Description The issue occurs under certain conditions when processing SSL forward proxy...

CVE-2018-5535: Improper Input Validation

On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed by a Virtual Server with an associated QoE profile that has Video enabled, may cause TMM to incorrectly buffer response data causing the TMM to restart resulting in a Denial of...

CVE-2018-5528

Under certain conditions, TMM may restart and produce a core file while processing APM data on BIG-IP 13.0.1 or 13.1.0.4-13.1.0.7...

Design/Logic Flaw

Under certain conditions, TMM may restart and produce a core file while processing APM data on BIG-IP 13.0.1 or 13.1.0.4-13.1.0.7...

CVE-2018-5528

Under certain conditions, TMM may restart and produce a core file while processing APM data on BIG-IP 13.0.1 or 13.1.0.4-13.1.0.7...

CVE-2018-5528

CVE-2018-5528 affects F5 BIG-IP TMM when processing BIG-IP APM data, potentially causing TMM restart and core file creation leading to a DoS. Vulnerable: BIG-IP APM/TMM on BIG-IP versions 13.0.1 and 13.1.0.4–13.1.0.7. Impact: temporary traffic processing disruption and device group failover durin...

PT-2018-17021

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 13.1.0 through 13.1.0.7 Description A remote attacker can force the Traffic Management Microkernel tmm to leak memory on virtual servers configured with a Client SSL or Server SSL profile that has the SSL Forward Proxy featu...

CVE-2018-5528: Improper Input Validation

Under certain conditions, TMM may restart and produce a core file while processing APM data on BIG-IP 13.0.1 or 13.1.0.4-13.1.0.7...

PT-2018-17022

Name of the Vulnerable Software and Affected Versions BIG-IP versions 13.0.1 through 13.1.0.7 Description The issue occurs under certain conditions when processing APM data, which may cause TMM to restart and produce a core file. Recommendations For BIG-IP version 13.0.1, update to a version...

Denial of Service Vulnerability in Multiple F5 Products (CNVD-2018-11507)

F5 BIG-IP LTM, etc. are products of F5 Corporation, U.S.A. F5 BIG-IP LTM is a local traffic manager; BIG-IP AAM is an application acceleration manager. A security vulnerability exists in several F5 products. A remote attacker could exploit this vulnerability to cause a denial of service TMM crash...

Information disclosure

On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.3, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, a malformed TLS handshake causes TMM to crash leading to a disruption of service. This issue is only exposed on the data plane when Proxy SSL configuration is enabled. The control plane is not impact...

CVE-2018-5522

On F5 BIG-IP 13.0.0, 12.0.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, when processing DIAMETER transactions with carefully crafted attribute-value pairs, TMM may crash...

Code injection

On F5 BIG-IP 13.0.0, 12.0.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, when processing DIAMETER transactions with carefully crafted attribute-value pairs, TMM may crash...