1144 matches found
Tenda AX1806 安全漏洞
The Tenda AX1806 is a WiFi6 wireless router from Tenda, a Chinese company. A stack buffer overflow vulnerability exists in the Tenda AX1806 sub519F4 function, which originates when /goform/SetVirtualServerCfg fails to properly validate the length and size of the input data, and can be exploited b...
PT-2024-28839 · Tenda · Tenda Ax1806
Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: A stack-based buffer overflow issue exists due to a vulnerability in the /goform/SetVirtualServerCfg endpoint, specifically within the sub 6320C function. This allows for potential exploitation...
PT-2024-29871
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description The issue is related to the ipvs module in the Linux kernel, where a vulnerability has been resolved by properly dereferencing pe in ip vs add service. This change also resolves a sparse warnin...
kernel: ipv4: NULL pointer dereference in ipv4_send_dest_unreach()
A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer skb was assumed to be associated with a device before calling ipoptionscompile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAPNETADMIN privileges t...
How To: Allow authentication bypass for specific URLs on virtual server with authentication enabled
In this scenario, the objective is to allow some specific URL path i.e. "www.mydomain.com/myallowedpath " to be accessed without requiring authentication when that resource is hosted behind a virtual server LB/CS that has authentication enabled. Such that, when a user accesseswww.mydomain.com or...
F5 Networks BIG-IP : BIG-IP SSL vulnerability (K000138912)
The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.4 / 16.1.4.3 / 17.1.1.3. It is, therefore, affected by a vulnerability as referenced in the K000138912 advisory. - When an SSL profile with alert timeout is configured with a non-default value on a virtual server,...
CVE-2024-33608
When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2024-33608
When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2024-28889
When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical...
CVE-2024-28889
CVE-2024-28889 affects F5 BIG-IP SSL when an SSL profile with alert timeout is set to a non-default value, causing the Traffic Management Microkernel (TMM) to terminate and disrupt traffic (DoS). Affected branches and fixes per K000138912: BIG-IP (all modules) 17.1.0–17.1.1 vulnerable; fixed in 1...
CVE-2024-28889 BIG-IP SSL vulnerability
When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical...
CVE-2024-28889 BIG-IP SSL vulnerability
When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical...
CVE-2024-33608
CVE-2024-33608 affects F5 BIG-IP IPsec vulnerability. When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate, resulting in a DoS on the BIG-IP data plane. CVSS v3.1 score is 7.5 (NETWORK, LOW attack complexity, no user int...
PT-2024-25373 · F5 · Big-Ip
Name of the Vulnerable Software and Affected Versions: BIG-IP affected versions not specified Description: When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Recommendations: At the moment, there is no information about...
F5 BIG-IP Next 安全漏洞
F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A denial of service vulnerability exists in F5 BIG-IP SSL that originates from an attacker being able to cause the Traffic...
F5 BIG-IP 安全漏洞
F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A denial-of-service vulnerability exists in F5 BIG-IP IPsec, which is due to a flaw in the configuration of IPsec on a virtual...
PT-2024-22629 · F5 · Big-Ip
Name of the Vulnerable Software and Affected Versions: BIG-IP versions prior to 17.0.0 Description: When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic...
CVE-2024-4112
A vulnerability classified as critical has been found in Tenda TX9 22.03.02.10. This affects the function sub42CB94 of the file /goform/SetVirtualServerCfg. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...
PT-2024-3226 · Tenda · Tenda Tx9
Name of the Vulnerable Software and Affected Versions: Tenda TX9 version 22.03.02.10 Description: A critical issue is related to the function sub 42CB94 in the /goform/SetVirtualServerCfg file, which is associated with a stack-based buffer overflow when handling the list parameter. This can be...