PT-2021-15359

Name of the Vulnerable Software and Affected Versions BIG-IP versions 14.1.x through 14.1.4.3 Description The issue occurs when an HTTP profile is configured on a virtual server. After a specific sequence of packets, chunked responses can cause the Traffic Management Microkernel TMM to terminate...

CVE-2021-23049: Uncontrolled Resource Consumption

On BIG-IP version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3, when the iRules RESOLVER::summarize command is used on a virtual server, undisclosed requests can cause an increase in Traffic Management Microkernel TMM memory utilization resulting in an out-of-memory condition and a...

CVE-2021-23051: Improper Input Validation

On BIG-IP versions 15.1.0.4 through 15.1.3, when the Data Plane Development Kit DPDK/Elastic Network Adapter ENA driver is used with BIG-IP on Amazon Web Services AWS systems, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. This is due to an incomplete fix for...

PT-2021-15363

Name of the Vulnerable Software and Affected Versions BIG-IP versions 12.1.x BIG-IP versions 13.1.x BIG-IP versions 14.1.x through 14.1.2.7 BIG-IP versions 15.1.x through 15.1.2 BIG-IP versions 16.0.x through 16.0.1.1 Description When IPSec is configured on a BIG-IP system, undisclosed requests...

PT-2021-15369

Name of the Vulnerable Software and Affected Versions BIG-IP versions 12.1.x BIG-IP versions 13.1.x before 13.1.4.1 BIG-IP versions 14.1.x before 14.1.4.3 BIG-IP versions 15.1.x before 15.1.3.1 BIG-IP versions 16.0.x before 16.0.1.2 Description When an SCTP profile with multiple paths is configur...

PT-2021-15357

Name of the Vulnerable Software and Affected Versions BIG-IP versions 12.1.x BIG-IP versions 13.1.x BIG-IP versions 14.1.x through 14.1.4.4 BIG-IP versions 15.1.x through 15.1.3.1 BIG-IP versions 16.x through 16.1.0 Description When a BIG-IP DNS system is configured with non-default Wide IP and...

CVE-2021-23036: Improper Input Validation

On version 16.0.x before 16.0.1.2, when a BIG-IP ASM and DataSafe profile are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2021-23048: Improper Input Validation

On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, when GPRS Tunneling Protocol GTP iRules commands or a GTP profile is configured on a virtual server, undisclosed GTP messages can cause the...

CVE-2021-23039: Improper Input Validation

On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.2.8, and all versions of 13.1.x and 12.1.x, when IPSec is configured on a BIG-IP system, undisclosed requests from an authorized remote IPSec peer, which already has a negotiated Security Association, can cause the Traffi...

PT-2021-15360

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 16.0.x through 16.0.1.2 Description When a BIG-IP ASM and DataSafe profile are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Recommendations For versions...

PT-2021-15368

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 16.x before 16.1.0 F5 BIG-IP versions 15.1.x before 15.1.3.1 F5 BIG-IP versions 14.1.x before 14.1.4.2 F5 BIG-IP versions 13.1.x before 13.1.4.1 F5 BIG-IP versions 12.1.x and 11.6.x Description When the Intel QuickAssist...

CVE-2021-23044: Improper Input Validation

On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, when the Intel QuickAssist Technology QAT compression driver is used on affected BIG-IP hardware and BIG-IP Virtual Edition VE platforms, undisclose...

CVE-2021-23035: Improper Input Validation

On BIG-IP 14.1.x before 14.1.4.4, when an HTTP profile is configured on a virtual server, after a specific sequence of packets, chunked responses can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluat...

CVE-2021-23034: Improper Input Validation

On BIG-IP version 16.x before 16.1.0 and 15.1.x before 15.1.3.1, when a DNS profile using a DNS cache resolver is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM process to terminate. Note: Software versions which have reached End of Technical...

CVE-2021-23032: Improper Input Validation

On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x, when a BIG-IP DNS system is configured with non-default Wide IP and pool settings, undisclosed DNS responses can cause the Traffic Management Microkernel TMM to terminate. Note:...

PT-2021-4694

Name of the Vulnerable Software and Affected Versions BIG-IP versions 15.1.x through 15.1.3.0 BIG-IP versions 16.x through 16.0.x Description The issue is related to the Traffic Management Microkernel TMM component of BIG-IP's access control and remote authentication system, which has inadequate...

F5 BIG-IP输入验证错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP TMM, which stems from an undisclosed request when configuring the...

VulnCheck KEV: CVE-2021-22991

The Traffic Management Microkernel of BIG-IP ASM Risk Engine has a buffer overflow vulnerability, leading to a bypassing of URL-based access controls...

CVE-2021-23011

On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, when the BIG-IP system is buffering packet fragments for reassembly, the Traffic Management Microkernel TMM may consume an excessive amount of...

PT-2021-15340

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 12.1.x through 12.1.5.2 F5 BIG-IP versions 13.1.x through 13.1.3.5 F5 BIG-IP versions 14.1.x through 14.1.3 F5 BIG-IP versions 15.1.x through 15.1.2 F5 BIG-IP versions 16.0.x through 16.0.0 Description The Traffic Management...