Design/Logic Flaw

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, the Traffic Management Microkernel TMM may stop responding when processing Stream Control Transmission Protocol SCTP traffic under certain conditions. This...

CVE-2021-23012

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, and 13.1.x before 13.1.4, lack of input validation for items used in the system support functionality may allow users granted either "Resource Administrator" or "Administrator" roles to execute arbitrary bash...

CVE-2021-23012

CVE-2021-23012 affects F5 BIG-IP: lack of input validation in system support functionality may allow users with either the Resource Administrator or Administrator roles to execute arbitrary bash commands on BIG-IP. Affected versions include 16.x before 16.0.1.1, 15.x before 15.1.3, 14.x before 14...

CVE-2021-23013

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, the Traffic Management Microkernel TMM may stop responding when processing Stream Control Transmission Protocol SCTP traffic under certain conditions. This...

CVE-2021-23013

CVE-2021-23013 affects F5 BIG-IP TMM SCTP processing. Affected BIG-IP versions are 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, where SCTP traffic on a virtual server with an SCTP profile may cause TMM to stop responding. ...

CVE-2021-23011

CVE-2021-23011 affects F5 BIG-IP TMM. When the BIG-IP system buffers packet fragments for reassembly, TMM may consume excessive resources, causing a restart and failover. Affected branches include 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x bef...

CVE-2021-23011

On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, when the BIG-IP system is buffering packet fragments for reassembly, the Traffic Management Microkernel TMM may consume an excessive amount of...

CVE-2021-23008

On version 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and all versions of 16.0.x and 11.6.x., BIG-IP APM AD Active Directory authentication can be bypassed via a spoofed AS-REP Kerberos Authentication Service Response response sent over a hijacked KDC...

CVE-2021-23008

CVE-2021-23008 affects BIG-IP APM AD authentication. Vulnerable in: BIG-IP APM AD from versions 16.0.x (all), 15.x up to 15.1.2, 14.x up to 14.1.3, 13.x up to 13.1.3, 12.x up to 12.1.5, and all 11.x (not fixed). Root cause: bypass via a spoofed AS-REP over a hijacked KDC or compromised AD server....

PT-2021-15339

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 13.1.x through 13.1.3 F5 BIG-IP versions 14.1.x through 14.1.3 F5 BIG-IP versions 15.1.x through 15.1.2 F5 BIG-IP versions 16.0.x through 16.0.0 Description The issue is related to a lack of input validation for items used i...

PT-2021-15341

Name of the Vulnerable Software and Affected Versions BIG-IP Advanced WAF and ASM versions 14.1.x through 14.1.3 BIG-IP Advanced WAF and ASM versions 15.1.x through 15.1.2 BIG-IP Advanced WAF and ASM versions 16.0.x through 16.0.0 Description The issue concerns missing authorization checks for fi...

PT-2021-15343

Name of the Vulnerable Software and Affected Versions BIG-IP APM versions 11.6.x BIG-IP APM versions 12.1.x BIG-IP APM versions 13.1.x before 13.1.4 BIG-IP APM versions 14.1.x before 14.1.4.1 BIG-IP APM versions 15.1.x before 15.1.3 BIG-IP APM versions 16.0.x Description An issue allows an attack...

CVE-2021-23014: Missing Authorization

On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, and 14.1.x before 14.1.4, BIG-IP Advanced WAF and ASM are missing authorization checks for file uploads to a specific directory within the REST API which might allow Authenticated users with guest privileges to upload files. Note: Software...

PT-2021-15337

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 16.0.x through 16.0.1.1 F5 BIG-IP versions 15.1.x through 15.1.2 F5 BIG-IP versions 14.1.x through 14.1.3.1 F5 BIG-IP versions 13.1.x through 13.1.3.5 F5 BIG-IP versions 12.1.x through 12.1.5.3 Description The issue occurs...

PT-2021-15340

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 12.1.x through 12.1.5.2 F5 BIG-IP versions 13.1.x through 13.1.3.5 F5 BIG-IP versions 14.1.x through 14.1.3 F5 BIG-IP versions 15.1.x through 15.1.2 F5 BIG-IP versions 16.0.x through 16.0.0 Description The Traffic Management...

PT-2021-15336

Name of the Vulnerable Software and Affected Versions BIG-IP versions 15.1.x through 15.1.2 BIG-IP versions 16.0.x through 16.0.0 Description The issue is caused by malformed HTTP/2 requests, which may lead to an infinite loop resulting in a Denial of Service for Data Plane traffic. This is a dat...

PT-2021-15342

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 13.1.0.8 through 13.1.3.6 F5 BIG-IP versions 14.1.x before 14.1.4.2 F5 BIG-IP versions 15.1.x before 15.1.3 F5 BIG-IP versions 16.0.x Description The issue allows an authenticated user with the 'Administrator' role to bypass...

PT-2021-15338

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.6.x before 11.6.5.3 F5 BIG-IP versions 12.1.x before 12.1.6 F5 BIG-IP versions 13.1.x before 13.1.4 F5 BIG-IP versions 14.1.x before 14.1.4 F5 BIG-IP versions 15.1.x before 15.1.3 F5 BIG-IP versions 16.0.x before 16.0.1.1...

CVE-2021-23012: Improper Neutralization of Special Elements used in an OS Command

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, and 13.1.x before 13.1.4, lack of input validation for items used in the system support functionality may allow users granted either "Resource Administrator" or "Administrator" roles to execute arbitrary bash...

CVE-2021-23009: Loop with Unreachable Exit Condition

On BIG-IP version 16.0.x before 16.0.1.1 and 15.1.x before 15.1.3, malformed HTTP/2 requests may cause an infinite loop which causes a Denial of Service for Data Plane traffic. TMM takes the configured HA action when the TMM process is aborted. There is no control plane exposure, this is a data...