F5 Networks BIG-IP : BIG-IP engineering hotfix Trusted Platform Module vulnerability (K91171450)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K91171450 advisory. - On impacted versions and platforms the Trusted Platform Module TPM system integrity check cannot detect modifications...

F5 Networks BIG-IP : Microarchitectural Load Port Data Sampling - Information Leak (MLPDS) (K97035296)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K97035296 advisory. - Microarchitectural Load Port Data Sampling MLPDS: Load ports on some microprocessors utilizing speculative execution...

F5 Networks BIG-IP : OpenSSL vulnerability (K21462542)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.0.0 / 15.0.0. It is, therefore, affected by a vulnerability as referenced in the K21462542 advisory. - While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This...

F5 Networks BIG-IP : BIG-IP compression driver vulnerability (K35408374)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.4.1 / 14.1.4.2 / 15.1.3.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K35408374 advisory. - On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x...

F5 Networks BIG-IP : big3d agent vulnerability (K72708443)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.0.4 / 14.0.0. It is, therefore, affected by a vulnerability as referenced in the K72708443 advisory. - On BIG-IP DNS and GTM version 13.1.x before 13.1.0.4, and all versions of 12.1.x and 11.6.x, big3d does not secure...

F5 Networks BIG-IP : Apache Tomcat vulnerability (K24551552)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1.1. It is, therefore, affected by a vulnerability as referenced in the K24551552 advisory. When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was ...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K30523121)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.3.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K30523121 advisory. - On BIG-IP version 16.x before 16.1.0 and 15.1.x before 15.1.3.1, when a DNS profile using a DNS cache resolver is...

F5 Networks BIG-IP : Apache HTTPD vulnerability (K78131906)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.4 / 21.0.0.1. It is, therefore, affected by a vulnerability as referenced in the K78131906 advisory. A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to a...

Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager

Python script to test if a F5 BIG-IP is vuln...

F5 Networks BIG-IP : Nettle vulnerability (K45616155)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K45616155 advisory. - A Bleichenbacher type side-channel based padding oracle attack was found in the way nettle handles endian conversion ...

F5 Networks BIG-IP : TMM vulnerability (K04730051)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.0.0.5 / 14.1.0.6. It is, therefore, affected by a vulnerability as referenced in the K04730051 advisory. - On BIG-IP PEM 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, under certain conditions, the TMM process may terminate and...

F5 Networks BIG-IP : QEMU vulnerability (K41142448)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1.1. It is, therefore, affected by a vulnerability as referenced in the K41142448 advisory. ethgetgsotype in net/eth.c in QEMU 4.2.1 allows guest OS users to trigger an assertion failure. A guest can crash th...

F5 Networks BIG-IP : iRules RESOLVER::summarize memory leak vulnerability (K65397301)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.3 / 16.0.1.2 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K65397301 advisory. - On BIG-IP version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3, when the iRules RESOLVER::summarize...

F5 Networks BIG-IP : CGNAT LSN vulnerability (K04048104)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.3.1 / 15.1.1 / 16.0.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K04048104 advisory. - On BIG-IP LTM/CGNAT version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5...

F5 Networks BIG-IP : Linux kernel vulnerability (K01043241)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K01043241 advisory. - net/netfilter/nfnetlinkcthelper.c in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for...

F5 Networks BIG-IP : libssh vulnerability (K05295501)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K05295501 advisory. - A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR or DES ciphers if...

F5 Networks BIG-IP : procps-ng vulnerability (K16124204)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K16124204 advisory. - procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strv...

F5 Networks BIG-IP : BIG-IP Configuration utility authenticated SQL injection vulnerability (K000137365)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5.1 + Hotfix-BIGIP-13.1.5.1.0.20.2-ENG / 14.1.5.6 + Hotfix-BIGIP-14.1.5.6.0.10.6-ENG / 15.1.10.2 + Hotfix-BIGIP-15.1.10.2.0.44.2-ENG / 15.1.10.3 / 16.1.4.1 + Hotfix-BIGIP-16.1.4.1.0.50.5-ENG / 16.1.4.2 / 17.1.0.3 +...

F5 Networks BIG-IP : BIG-IP AFM vulnerability (K14703097)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.3.2 / 14.1.2.1 / 15.0.1.1 / 15.1.0. It is, therefore, affected by a vulnerability as referenced in the K14703097 advisory. - On BIG-IP AFM 15.0.0-15.0.1, 14.0.0-14.1.2, and 13.1.0-13.1.3.1, when bad-actor detection is...

F5 Networks BIG-IP : QEMU vulnerability (K41301038)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K41301038 advisory. - QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usbpacketmap return value is not checked...