F5 Networks BIG-IP : Advanced WAF/ASM buffer-overflow vulnerability (K52510511)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.5.3 / 12.1.5.3 / 13.1.3.6 / 14.1.4 / 15.1.2.1 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K52510511 advisory. - On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before...

F5 BIG-IP 跨站脚本漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. F5 BIG-IP suffers from a cross-site scripting vulnerability that can be exploited by an attacker to trigger cross-site scripti...

PT-2021-3907

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 16.0.x through 16.0.1.1 F5 BIG-IP versions 15.1.x through 15.1.2.1 F5 BIG-IP versions 14.1.x through 14.1.4 F5 BIG-IP versions 13.1.x through 13.1.3.6 F5 BIG-IP versions 12.1.x through 12.1.5.3 F5 BIG-IQ versions 7.1.0.x...

F5 Networks BIG-IP : BIG-IP HTTP/2 vulnerability (K02333782)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.4 / 15.1.0 / 16.0.0. It is, therefore, affected by a vulnerability as referenced in the K02333782 advisory. - On versions 15.0.x before 15.1.0 and 14.1.x before 14.1.4, the BIG-IP system provides an option to connect...

F5 Networks BIG-IP : BIG-IP Advanced WAF and ASM XSS vulnerability (K55237223)

The version of F5 Networks BIG-IP installed on the remote host is prior to 12.1.5.3 / 13.1.3.6 / 14.1.3.1 / 15.1.2 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K55237223 advisory. - On BIG-IP Advanced WAF and BIG-IP ASM versions 16.0.x before 16.0.1.1,...

F5 Networks BIG-IP : BIG-IP MPTCP vulnerability (K31025212)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.5.3 / 12.1.5.3 / 13.1.3.6 / 14.1.3.1 / 15.1.2 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K31025212 advisory. - On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before...

F5 BIG-IP 代码问题漏洞

F5 BIG-IP is F5's application delivery platform that integrates network traffic scheduling, load balancing, intelligent DNS, remote access policy management, etc. F5 BIG-IQ Centralized Management is F5's management and scheduling platform that centrally manages and controls the F5 BIG-IP physical...

Apple Security Update: macOS Big Sur 11.2.3 

Apple recommends to install security update macOS Big Sur 11.2.3 on devices macOS Big Sur...

About the security content of macOS Big Sur 11.2.3

About the security content of macOS Big Sur 11.2.3 This document describes the security content of macOS Big Sur 11.2.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

golang: math/big: panic during recursive division of very large numbers

A flaw was found in the math/big package of Go's standard library that causes a denial of service. Applications written in Go that use math/big via cryptographic packages, including crypto/rsa and crypto/x509, are vulnerable and can potentially cause panic via a crafted certificate chain. The...

Defending online anonymity and speech with Eva Galperin: Lock and Code S02E03

This week on Lock and Code, we discuss the top security headlines generated right here on Labs. In addition, we talk to Eva Galperin, director of cybersecurity for Electronic Frontier Foundation, about the importance of protecting online anonymity and speech. In January, the New York Times expose...

BIG-IP Competitive Conditions Issue Vulnerability (CNVD-2021-13215)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A security vulnerability exists in BIG-IP, no information about this vulnerability is available at this time and no detailed...

F5 BIG-IP Cross-Site Scripting Vulnerability (CNVD-2021-13211)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. F5 BIG-IP suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client data by th...

F5 BIG-IP AFM Cross-Site Scripting Vulnerability (CNVD-2021-13213)

F5 BIG-IP AFM is an advanced firewall product from F5 USA for protection against DDos attacks. A cross-site scripting vulnerability exists in BIG-IP AFM, which originates from the lack of proper validation of client data by a WEB application. An attacker can exploit this vulnerability to execute...

Apple Security Update: macOS Big Sur 11.2.2

Apple recommends to install security update macOS Big Sur 11.2.2 on devices macOS Big Sur 11.2.1...

F5 BIG-IP APM Resource Management Error Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A resource management error vulnerability exists in the BIG-IP APM, which arises from mismanagement of system resources e.g.,...

BIG-IP cross-site scripting vulnerability (CNVD-2021-13214)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A cross-site scripting vulnerability exists in BIG-IP, which stems from the lack of proper validation of client-side data by t...

Apple Security Update: macOS Big Sur 11.2.2

Apple recommends to install security update macOS Big Sur 11.2.2 on devices macOS Big Sur 11.2.1...

golang: math/big: panic during recursive division of very large numbers

A flaw was found in the math/big package of Go's standard library that causes a denial of service. Applications written in Go that use math/big via cryptographic packages, including crypto/rsa and crypto/x509, are vulnerable and can potentially cause panic via a crafted certificate chain. The...

F5 BIG-IP Buffer Overflow Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A buffer overflow vulnerability exists in BIG-IP, which originates when a network system or product performs an operation in...