F5 Networks BIG-IP : BIG-IP AFM SQL injection vulnerability (K21121741)

A vulnerability in the BIG-IP AFM Configuration utility may allow any authenticated BIG-IP user to run a SQL injection attack. CVE-2019-6658 Impact An attacker may be able to extract table name enumeration and user account names. All other data available through the injection is already available...

F5 Networks BIG-IP : BIG-IP Edge Client for macOS vulnerability (K49827114)

BIG-IP Edge Client for macOS may allow unprivileged users to access files owned by the root account. CVE-2019-6668 Impact BIG-IP Edge Client may allow an unprivileged user on the affected macOS device to get ownership of files owned by the root account on the local client host. C Tenable Network...

F5 Networks BIG-IP : vCMP vulnerability (K05765031)

vCMP hypervisors incorrectly expose the plaintext unit key for their vCMP guests on the file system.CVE-2019-6670 Impact An attacker may use this vulnerability to extract the master key of vCMP guests. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

F5 Networks BIG-IP : Linux kernel vulnerability (K27673650)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.0.1.1 / 15.1.0. It is, therefore, affected by a vulnerability as referenced in the K27673650 advisory. - An issue was discovered in the procpidstack function in fs/proc/base.c in the Linux kernel through 4.18.11. It doe...

F5 Networks BIG-IP : TMM FastL4 vulnerability (K53183580)

While processing traffic through a standard virtual server that targets a FastL4 virtual server VIP on VIP, hardware appliances may stop responding. CVE-2019-6680 Impact This vulnerability allows remote attackers to cause a denial of service DoS on the BIG-IP system. This issue affects only a...

F5 Networks BIG-IP : TLS 1.3 vulnerability (K34450231)

BIG-IP virtual servers with TLS 1.3 enabled may experience a denial-of-service DoS due to undisclosed incoming messages. CVE-2019-6659 Impact BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator Undisclosed messages sent to a TLS 1.3-enabled...

F5 Networks BIG-IP : BIG-IP restjavad vulnerability (K01049383)

Sensitive information is logged into the local log files and/or remote logging targets when restjavad processes an invalid request. Users with access to the log files would be able to view that data. CVE-2019-6662 Impact When logging invalid requests,such as HTTP code 400 errors, the restjavad...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K92411323)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.1.5 / 14.0.0.5 / 14.1.0.6 / 14.1.2 / 15.0.1.1 / 15.1.0. It is, therefore, affected by a vulnerability as referenced in the K92411323 advisory. - On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, and...

F5 Networks BIG-IP : BIG-IP MRF Diameter vulnerability (K55812535)

TheTraffic Management Microkernel TMM might stop responding after the total number of diameter connections and pending messages on a single virtual server has reached 32K. CVE-2019-6686 Impact BIG-IP This vulnerability affects only virtual servers associated with the message routing diameter...

F5 Networks BIG-IP : NodeJS vulnerability (K63025104)

The Node.js inspector, in 6.x and later is vulnerable to a DNS rebinding attack which could be exploited to perform remote code execution. An attack is possible from malicious websites open in a web browser on the same computer, or another computer with network access to the computer running the...

F5 Networks BIG-IP : TMM vulnerability (K06747393)

Under certain conditions, when using custom TCP congestion control settings in a TCP profile, TMM stops processingtraffic when processed by an iRule. CVE-2019-6677 Impact The Traffic Management Microkernel TMM may generate a core file and restart, causing a traffic disruption or failover event.Th...

F5 Networks BIG-IP : TMOS vulnerability (K03126093)

On BIG-IP 15.0.0 and 14.1.0-14.1.0.6, under certain conditions, network protections on the management port do not follow current best practices. CVE-2019-6664 Impact BIG-IP The defaultfirewall rules for the management interface are not reliably reinstalled after first boot. As a result, the...

F5 Networks BIG-IP : TMM vulnerability (K92002212)

Traffic Management Microkernel TMM may restart on BIG-IP Virtual Edition VE when using virtio direct descriptors and packets 2 KB or larger. CVE-2019-6676 Impact Some virtio backend implementations send large packets 2 KB or larger even when Large Offload Receive LRO is disabled. If the backend...

F5 Networks BIG-IP : TMM vulnerability (K23860356)

iRules performing HTTP header manipulation may cause a denial-of-serviceDoS when processing traffic handled by a virtual server with an associated HTTP profile, in specific circumstances, when the requests do not strictly conform to RFCs.CVE-2019-6660 Impact The affected BIG-IP system's Traffic...

F5 Networks BIG-IP : TMM vulnerability (K11447758)

Undisclosed traffic flow may cause theTraffic Management Microkernel TMM to restartunder some circumstances. CVE-2019-6669 Impact A remote attacker may be able to cause the Traffic Management Microkernel TMM to restart.This issue occurs on multi-blade chassis, including multi-blade vCMP guests.Th...

F5 Networks BIG-IP : BIG-IP TMUI XSS vulnerability (K22441651)

A reflected cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface TMUI, also known as the BIG-IP Configuration utility.CVE-2019-6657 Impact An attacker may exploit this vulnerability usinga crafted URL to a reflected cross-site...

F5 Networks BIG-IP : SCP vulnerability (K54336216)

The system does not properly enforce the access controls for the scp.whitelist and scp.blacklist files whenpaths are symbolic links symlinks. This allows authenticated users with Secure Copy SCP protocol access to overwrite certain configuration files that would otherwise be restricted...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K04897373)

When the tm.minipfragsize BigDB variable is modified from the default value to a value less than 60 and the packet filter feature is enabled, specifically crafted fragmented TCP packets may cause the Traffic Management Microkernel TMM to fail and restart.CVE-2019-6678 Impact TMM may restart and...

F5 Networks BIG-IP : BIG-IP ASM memory exhaustion vulnerability (K40452417)

The BIG-IP ASM system may consume excessive resources when processing certain types of HTTP responses from the origin web server. This vulnerability is only known to affect resource-constrained systems in which the security policy is configured with response-side features, such as Data Guard or...

F5 Networks BIG-IP : Linux kernel KVM subsystem vulnerability (K11186236)

In the Linux kernel before 4.20.8, kvmioctlcreatedevice in virt/kvm/kvmmain.c mishandles reference counting because of a race condition, leading to a use-after-free. CVE-2019-6974 Impact BIG-IP An attacker may use this vulnerability to cause a vCMP guest to crash,resulting in a denial-of-service...