F5 BIG-IP - TMM vulnerability CVE-2017-0302

Insufficient boundary checks on the request URL may cause the tmm process to assert when the user is redirected back to the original request URL following successful authentication to the BIG-IP APM system.CVE-2017-0302 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be...

F5 BIG-IP - TMM vulnerability CVE-2016-9249

An undisclosed traffic pattern received by a BIG-IP Virtual Server with TCP Fast Open enabled may cause the Traffic Management Microkernel TMM to restart, resulting in a Denial-of-Service DoS. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced...

F5 BIG-IP - TMM vulnerability CVE-2016-9253

Specific websocket traffic patterns may cause a disruption of service for virtual servers configured to use the websocket profile. CVE-2016-9253 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

Code injection

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2, undisclosed traffic patterns received while software SYN cookie protection is engaged may cause a disrupti...

CVE-2017-6137

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2, undisclosed traffic patterns received while software SYN cookie protection is engaged may cause a disrupti...

CVE-2017-6137

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2, undisclosed traffic patterns received while software SYN cookie protection is engaged may cause a disrupti...

CVE-2017-6137

The CVE-2017-6137 issue affects multiple F5 BIG-IP modules (BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WebSafe) on versions 11.6.1 HF1, 12.0.0 HF3–HF4, and 12.1.0–12.1.2. Undisclosed traffic patterns, when SYN cookie protection is...

CVE-2017-6137: Undefined Security Weakness

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2, undisclosed traffic patterns received while software SYN cookie protection is engaged may cause a disrupti...

F5 Networks BIG-IP : TMM vulnerability (K82851041)

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2, undisclosed traffic patterns received while software SYN cookie protection is engaged may cause a disrupti...

Authentication flaw

The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider SP connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authentication request from an...

CVE-2016-7467

The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider SP connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authentication request from an...

PT-2017-9192

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM versions 11.5.4 through 11.5.4 HF2 F5 BIG-IP APM versions 11.6.0 through 11.6.1 HF1 F5 BIG-IP APM versions 12.0.0 through 12.1.1 Description The TMM SSO plugin in F5 BIG-IP APM, when configured as a SAML Identity Provider with a...

CVE-2016-7467: Improper Input Validation

The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider SP connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authentication request from an...

CVE-2016-9252

The Traffic Management Microkernel TMM in F5 BIG-IP before 11.5.4 HF3, 11.6.x before 11.6.1 HF2 and 12.x before 12.1.2 does not properly handle minimum path MTU options for IPv6, which allows remote attackers to cause a denial-of-service DoS through unspecified vectors...

CVE-2016-9252

The CVE-2016-9252 issue affects F5 BIG-IP Traffic Management Microkernel (TMM) for IPv6 handling of minimum path MTU options. According to vendor advisories, vulnerable are BIG-IP TMM components across multiple lines: BIG-IP 12.x (before 12.1.2), 11.6.x (before 11.6.1 HF2), 11.5.4 HF3, and earlie...

F5 BIG-IP - TMM SSO plugin vulnerability CVE-2016-7467

Traffic may be disrupted or failover initiated when a malformed, signed SAML authentication request from an authenticated user is sent via SP connector on a BIG-IP configured as a SAML Identity Provider. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a...

F5 BIG-IP - TCP IPv6 vulnerability CVE-2016-9252

The Traffic Management Microkernel TMM in F5 BIG-IP systems before 11.5.4 HF3, 11.6.x before 11.6.1 HF2, and 12.x.x before 12.1.2 do not properly handle minimum path MTU options for IPv6, which allows remote attackers to cause a denial of service DoS through unspecified vectors...

F5 BIG-IP - TMM vulnerability CVE-2016-7468

An unauthenticated remote attacker may be able to disrupt services on the BIG-IP system with maliciously crafted network traffic. This vulnerability affects virtual servers associated with TCP profiles when the BIG-IP system SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might b...

F5 Networks BIG-IP : F5 TCP IPv6 vulnerability (K46535047)

The Traffic Management Microkernel TMM in F5 BIG-IP systems before 11.5.4 HF3, 11.6.x before 11.6.1 HF2, and 12.x.x before 12.1.2 do not properly handle minimum path MTU options for IPv6, which allows remote attackers to cause a denial of service DoS through unspecified vectors. CVE-2016-9252 C...

F5 Networks BIG-IP : TMM SSO plugin vulnerability (K95444512)

The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider SP connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authentication request from an...