PT-2024-19091 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP affected versions not specified Description: When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM process to...

CVE-2024-21849: Return of Pointer Value Outside of Expected Range

When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

F5 Networks BIG-IP : BIG-IP Websockets vulnerability (K000135873)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.4 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K000135873 advisory. - When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed...

CVE-2024-1342

A flaw was found in OpenShift. The existing Cross-Site Request Forgery CSRF protections in place do not properly protect GET requests, allowing for the creation of WebSockets via CSRF...

io.undertow:undertow-servlet (1.0.0.alpha15), io.undertow:undertow-websockets-jsr (1.0.0.alpha15) +27 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.alpha15)

io.undertow:undertow-core MAVEN version 1.0.0.alpha15 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha15 - io.undertow:undertow-websockets-jsr 1.0.0.alpha15 -...

io.undertow:undertow-http2-test-suite (1.3.2.final), io.undertow:undertow-servlet (1.3.2.final) +1 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.3.2.final)

io.undertow:undertow-core MAVEN version 1.3.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.2.final - io.undertow:undertow-servlet 1.3.2.final -...

io.undertow:undertow-http2-test-suite (1.2.0.beta9), io.undertow:undertow-servlet (1.2.0.beta9) +1 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.2.0.beta9)

io.undertow:undertow-core MAVEN version 1.2.0.beta9 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.0.beta9 - io.undertow:undertow-servlet 1.2.0.beta9 -...

io.undertow:undertow-servlet (1.0.0.beta32), io.undertow:undertow-websockets-jsr (1.0.0.beta32) potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.beta32)

io.undertow:undertow-core MAVEN version 1.0.0.beta32 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta32 - io.undertow:undertow-websockets-jsr 1.0.0.beta32 Source...

io.undertow:undertow-servlet (1.0.0.beta33), io.undertow:undertow-websockets-jsr (1.0.0.beta33) +2 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.beta33)

io.undertow:undertow-core MAVEN version 1.0.0.beta33 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta33 - io.undertow:undertow-websockets-jsr 1.0.0.beta33 -...

io.undertow:undertow-servlet (1.0.0.cr2), io.undertow:undertow-websockets-jsr (1.0.0.cr2) potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.cr2)

io.undertow:undertow-core MAVEN version 1.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.cr2 - io.undertow:undertow-websockets-jsr 1.0.0.cr2 Source cves:...

io.undertow:undertow-servlet (1.0.0.cr4), io.undertow:undertow-websockets-jsr (1.0.0.cr4) potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.cr4)

io.undertow:undertow-core MAVEN version 1.0.0.cr4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.cr4 - io.undertow:undertow-websockets-jsr 1.0.0.cr4 Source cves:...

io.undertow:undertow-servlet (1.0.0.beta29), io.undertow:undertow-websockets-jsr (1.0.0.beta29) potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.beta29)

io.undertow:undertow-core MAVEN version 1.0.0.beta29 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta29 - io.undertow:undertow-websockets-jsr 1.0.0.beta29 Source...

io.undertow:undertow-servlet (1.0.0.beta31), io.undertow:undertow-websockets-jsr (1.0.0.beta31) potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.beta31)

io.undertow:undertow-core MAVEN version 1.0.0.beta31 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta31 - io.undertow:undertow-websockets-jsr 1.0.0.beta31 Source...

io.undertow:undertow-servlet (1.0.0.cr1), io.undertow:undertow-websockets-jsr (1.0.0.cr1) potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.cr1)

io.undertow:undertow-core MAVEN version 1.0.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.cr1 - io.undertow:undertow-websockets-jsr 1.0.0.cr1 Source cves:...

io.undertow:undertow-servlet (1.0.0.cr3), io.undertow:undertow-websockets-jsr (1.0.0.cr3) potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.cr3)

io.undertow:undertow-core MAVEN version 1.0.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.cr3 - io.undertow:undertow-websockets-jsr 1.0.0.cr3 Source cves:...

io.undertow:undertow-servlet (1.0.0.beta23), io.undertow:undertow-websockets-jsr (1.0.0.beta23) potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.beta23)

io.undertow:undertow-core MAVEN version 1.0.0.beta23 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta23 - io.undertow:undertow-websockets-jsr 1.0.0.beta23 Source...

io.undertow:undertow-servlet (1.0.0.beta24), io.undertow:undertow-websockets-jsr (1.0.0.beta24) potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.beta24)

io.undertow:undertow-core MAVEN version 1.0.0.beta24 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta24 - io.undertow:undertow-websockets-jsr 1.0.0.beta24 Source...

io.undertow:undertow-servlet (1.0.0.beta25), io.undertow:undertow-websockets-jsr (1.0.0.beta25) potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.beta25)

io.undertow:undertow-core MAVEN version 1.0.0.beta25 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta25 - io.undertow:undertow-websockets-jsr 1.0.0.beta25 Source...

io.undertow:undertow-servlet (1.0.0.beta28), io.undertow:undertow-websockets-jsr (1.0.0.beta28) potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.beta28)

io.undertow:undertow-core MAVEN version 1.0.0.beta28 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta28 - io.undertow:undertow-websockets-jsr 1.0.0.beta28 Source...

io.undertow:undertow-servlet (1.0.0.beta26), io.undertow:undertow-websockets-jsr (1.0.0.beta26) potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.beta26)

io.undertow:undertow-core MAVEN version 1.0.0.beta26 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta26 - io.undertow:undertow-websockets-jsr 1.0.0.beta26 Source...