CVE-2018-5508

On F5 BIG-IP PEM versions 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.5.1-11.5.5, or 11.2.1, under certain conditions, TMM may crash when processing compressed data though a Virtual Server with an associated PEM profile using the content insertion option...

Code injection

On F5 BIG-IP 11.5.4 HF4-11.5.5, the Traffic Management Microkernel TMM may restart when processing a specific sequence of packets on IPv6 virtual servers...

CVE-2018-5508

On F5 BIG-IP PEM versions 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.5.1-11.5.5, or 11.2.1, under certain conditions, TMM may crash when processing compressed data though a Virtual Server with an associated PEM profile using the content insertion option...

CVE-2018-5510

On F5 BIG-IP 11.5.4 HF4-11.5.5, the Traffic Management Microkernel TMM may restart when processing a specific sequence of packets on IPv6 virtual servers...

CVE-2017-6155

On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or HTTP/2 requests may result in a disruption of service to TMM. Data plane is only exposed when a SPDY or HTTP/2 profile is attached to a virtual server. There is no control plane exposure...

CVE-2017-6158

In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling of invalid IP addresses...

CVE-2017-6148

Responses to SOCKS proxy requests made through F5 BIG-IP version 13.0.0, 12.0.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5 may cause a disruption of services provided by TMM. The data plane is impacted and exposed only when a SOCKS proxy profile is attached to a Virtual Server. The control plane i...

CVE-2017-6158

CVE-2017-6158 affects F5 BIG-IP TMM in multiple branches (12.0.0–12.1.2, 11.6.0–11.6.1, 11.5.1–11.5.5, 11.2.1) where TMM mishandles invalid IP addresses. The vulnerability stems from handling of invalid IPs and can cause a core dump and failover if certain features are disabled (Auto Last Hop, So...

CVE-2018-5510

CVE-2018-5510 affects F5 BIG-IP Traffic Management Microkernel (TMM) when handling a specific sequence of packets on IPv6 virtual servers, causing TMM to restart and potentially generate a core file. Impacts include TMM restart and, in HA deployments, failover to the peer device. Affected version...

CVE-2017-6148

The CVE-2017-6148 issue affects F5 BIG-IP systems where a SOCKS proxy profile attached to a Virtual Server can disrupt TMM operations. Affected releases include BIG-IP 13.0.0 and 13.x; 12.x (12.0.0–12.1.3.1; 12.1.3.2 is the fix), and 11.x (11.5.1–11.5.5; 11.6.1–11.6.2; 11.6.3 is the fix). The vul...

CVE-2017-6158

In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling of invalid IP addresses...

CVE-2018-5510

On F5 BIG-IP 11.5.4 HF4-11.5.5, the Traffic Management Microkernel TMM may restart when processing a specific sequence of packets on IPv6 virtual servers...

CVE-2018-5508

On F5 BIG-IP PEM versions 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.5.1-11.5.5, or 11.2.1, under certain conditions, TMM may crash when processing compressed data though a Virtual Server with an associated PEM profile using the content insertion option...

CVE-2018-5508

CVE-2018-5508 affects F5 BIG-IP PEM (PEM profile with content insertion) and can cause the Traffic Management Microkernel (TMM) to crash, generate a core file, and restart under certain conditions when processing compressed data. Affected versions: BIG-IP PEM 13.0.0; 12.0.0–12.1.3.1; 11.6.0–11.6....

PT-2018-8296

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.1 through 11.5.5 F5 BIG-IP versions 11.6.1 through 11.6.2 F5 BIG-IP versions 12.0.0 through 12.1.3.1 F5 BIG-IP version 13.0.0 Description The issue affects the data plane when a SOCKS proxy profile is attached to a...

PT-2018-17002

Name of the Vulnerable Software and Affected Versions F5 BIG-IP PEM versions 11.2.1, 11.5.1 through 11.5.5, 11.6.0 through 11.6.2, 12.0.0 through 12.1.3.1, 13.0.0 Description The issue occurs when TMM processes compressed data through a Virtual Server with an associated PEM profile that uses the...

PT-2018-8304

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.2.1 F5 BIG-IP versions 11.5.1 through 11.5.5 F5 BIG-IP versions 11.6.0 through 11.6.1 F5 BIG-IP versions 12.0.0 through 12.1.2 Description The issue is related to the handling of invalid IP addresses in TMM. Recommendatio...

CVE-2017-6158: Undefined Security Weakness

In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling of invalid IP addresses...

CVE-2017-6155: Undefined Security Weakness

On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or HTTP/2 requests may result in a disruption of service to TMM. Data plane is only exposed when a SPDY or HTTP/2 profile is attached to a virtual server. There is no control plane exposure...

CVE-2017-6148: Improper Input Validation

Responses to SOCKS proxy requests made through F5 BIG-IP version 13.0.0, 12.0.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5 may cause a disruption of services provided by TMM. The data plane is impacted and exposed only when a SOCKS proxy profile is attached to a Virtual Server. The control plane i...