26 matches found
EUVD-2018-17309
Malware in sbrugna...
F5 Networks BIG-IP : big3d agent vulnerability (K72708443)
The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.0.4 / 14.0.0. It is, therefore, affected by a vulnerability as referenced in the K72708443 advisory. - On BIG-IP DNS and GTM version 13.1.x before 13.1.0.4, and all versions of 12.1.x and 11.6.x, big3d does not secure...
K000132972: BIG-IP iQuery mesh vulnerability CVE-2023-28742
Security Advisory Description When DNS is provisioned, an authenticated remote command execution vulnerability exists in DNS iQuery mesh. CVE-2023-28742 Impact This vulnerability may allow an authenticated attacker with network access to the DNS iQuery mesh through the BIG-IP management port and/...
K82038789: big3d vulnerability CVE-2018-5540
Security Advisory Description The big3d process does not irrevocably minimize group privileges at startup. CVE-2018-5540 Impact There is not a known attack vector, but if the big3d process is compromised, it is possible for it to regain the group privileges it was launched with. Security Advisory...
K72708443: big3d agent vulnerability CVE-2021-22982
Security Advisory Description big3d does not securely handle and parse certain payloads resulting in a buffer overflow. CVE-2021-22982 Impact An attacker may trigger a buffer overflow to cause the big3d agent to stop responding, which generates a core file. Security Advisory Status F5 Product...
K71103363: BIG-IP big3d vulnerability CVE-2022-29480
Security Advisory Description When multiple route domains are configured, undisclosed requests to big3d can cause an increase in CPU resource utilization. CVE-2022-29480 Impact This vulnerability allows a remote, unauthenticated attacker to cause a degradation of service that can lead to a...
K10196624: libcurl vulnerability CVE-2016-8618
Security Advisory Description The libcurl API function called curlmaprintf before version 7.51.0 can be tricked into doing a double-free due to an unsafe sizet multiplication, on systems using 32 bit sizet variables. CVE-2016-8618 Impact A custom monitor or script that calls the curl command may...
CVE-2022-29480
On F5 BIG-IP 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when multiple route domains are configured, undisclosed requests to big3d can cause an increase in CPU resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evalua...
CVE-2022-29480: Uncontrolled Resource Consumption
On F5 BIG-IP 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when multiple route domains are configured, undisclosed requests to big3d can cause an increase in CPU resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evalua...
PT-2022-19645
Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to 13.1.5 F5 BIG-IP versions 12.1.x F5 BIG-IP versions 11.6.x Description The issue causes an increase in CPU resource utilization when multiple route domains are configured and undisclosed requests are made to big3d...
F5 Networks BIG-IP : BIG-IP big3d vulnerability (K71103363)
The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5 / 14.0.0. It is, therefore, affected by a vulnerability as referenced in the K71103363 advisory. - On F5 BIG-IP 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when multiple route domains are...
CVE-2022-29480
On F5 BIG-IP 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when multiple route domains are configured, undisclosed requests to big3d can cause an increase in CPU resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not evalua...
CVE-2021-22982
On BIG-IP DNS and GTM version 13.1.x before 13.1.0.4, and all versions of 12.1.x and 11.6.x, big3d does not securely handle and parse certain payloads resulting in a buffer overflow. Note: Software versions which have reached End of Software Development EoSD are not evaluated...
CVE-2021-22982
On BIG-IP DNS and GTM version 13.1.x before 13.1.0.4, and all versions of 12.1.x and 11.6.x, big3d does not securely handle and parse certain payloads resulting in a buffer overflow. Note: Software versions which have reached End of Software Development EoSD are not evaluated...
CVE-2021-22982: Buffer Copy without Checking Size of Input
On BIG-IP DNS and GTM version 13.1.x before 13.1.0.4, and all versions of 12.1.x and 11.6.x, big3d does not securely handle and parse certain payloads resulting in a buffer overflow. Note: Software versions which have reached End of Software Development EoSD are not evaluated...
PT-2021-15315
Name of the Vulnerable Software and Affected Versions BIG-IP DNS and GTM versions 11.6.x BIG-IP DNS and GTM versions 12.1.x BIG-IP DNS and GTM versions 13.1.x before 13.1.0.4 Description The issue arises from the insecure handling and parsing of certain payloads by big3d, resulting in a buffer...
F5 Networks BIG-IP : big3d vulnerability (K82038789)
The big3d process does not irrevocably minimize group privileges at startup. CVE-2018-5540 Impact There is not a known attack vector, but if the big3d process is compromised, it is possible for it to regain the group privileges it was launched with. C Tenable Network Security, Inc. The descriptiv...
Code injection
On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.1.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.1.0-2.3.0 the big3d process does not irrevocably minimize group privileges at start up...
CVE-2018-5540
On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.1.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.1.0-2.3.0 the big3d process does not irrevocably minimize group privileges at start up...
CVE-2018-5540: Incorrect Permission Assignment for Critical Resource
On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.1.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.1.0-2.3.0 the big3d process does not irrevocably minimize group privileges at start up...