Design/Logic Flaw

On F5 BIG-IP 13.0.0-13.1.0.5 or 12.0.0-12.1.3.3, malicious root users with access to a VCMP guest can cause a disruption of service on adjacent VCMP guests running on the same host. Exploiting this vulnerability causes the vCMPd process on the adjacent VCMP guest to restart and produce a core fil...

CVE-2018-5512

On F5 BIG-IP 13.1.0-13.1.0.5, when Large Receive Offload LRO and SYN cookies are enabled default settings, undisclosed traffic patterns may cause TMM to restart...

CVE-2018-5515

On F5 BIG-IP 13.0.0-13.1.0.5, using RADIUS authentication responses from a RADIUS server with IPv6 addresses may cause TMM to crash, leading to a failover event...

CVE-2018-5516

On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.0.2-2.3.0, authenticated users granted TMOS Shell tmsh access can access objects on the file syste...

CVE-2018-5518

On F5 BIG-IP 13.0.0-13.1.0.5 or 12.0.0-12.1.3.3, malicious root users with access to a VCMP guest can cause a disruption of service on adjacent VCMP guests running on the same host. Exploiting this vulnerability causes the vCMPd process on the adjacent VCMP guest to restart and produce a core fil...

CVE-2018-5520

On an F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.2.1-11.6.3.1 system configured in Appliance mode, the TMOS Shell tmsh may allow an administrative user to use the dig utility to gain unauthorized access to file system resources...

CVE-2018-5520

On an F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.2.1-11.6.3.1 system configured in Appliance mode, the TMOS Shell tmsh may allow an administrative user to use the dig utility to gain unauthorized access to file system resources...

CVE-2018-5518

On F5 BIG-IP 13.0.0-13.1.0.5 or 12.0.0-12.1.3.3, malicious root users with access to a VCMP guest can cause a disruption of service on adjacent VCMP guests running on the same host. Exploiting this vulnerability causes the vCMPd process on the adjacent VCMP guest to restart and produce a core fil...

CVE-2018-5515

CVE-2018-5515 affects F5 BIG-IP BIG-IP LTM and related modules when RADIUS authentication responses come from an IPv6 RADIUS server. The root issue is a crash in the Traffic Management Microkernel (TMM) that causes a TMM core dump and a failover event, observed when BIG-IP administrative users us...

CVE-2018-5514

CVE-2018-5514 affects F5 BIG-IP TMM when HTTP/2 is enabled. Malicious HTTP/2 frames may cause a denial of service and expose data plane for virtual servers; control plane remains unaffected. Affected versions include BIG-IP 13.1.0.x (notably 13.1.0.0–13.1.0.5) and 14.x; fixes are in 13.1.0.6 and ...

CVE-2018-5517

The CVE-2018-5517 issue affects F5 BIG-IP TMM handling for self IPs and FastL4, where malformed TCP packets can cause data-plane denial of service. Linked advisory K25573437 states vulnerable BIG-IP versions include 13.1.0 (up to 13.1.0.6) and 14.x; fixes are introduced in 13.1.0.6 and 14.0.0. Th...

CVE-2018-5520

CVE-2018-5520 affects F5 BIG-IP in Appliance mode where the TMOS Shell (tmsh) can be exploited via the dig utility to access file-system resources. The vulnerability allows unauthorized disclosure of information. Affected product scope includes BIG-IP versions: 11.x (11.2.1–11.6.3.1), 12.x (12.1....

CVE-2018-5517

On F5 BIG-IP 13.1.0-13.1.0.5, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs...

CVE-2018-5515

On F5 BIG-IP 13.0.0-13.1.0.5, using RADIUS authentication responses from a RADIUS server with IPv6 addresses may cause TMM to crash, leading to a failover event...

CVE-2018-5518

CVE-2018-5518 affects F5 BIG-IP vCMP guests. A root user on a vCMP guest can disrupt services on adjacent vCMP guests on the same host, by triggering a restart of the adjacent guest’s vcmpd process and creating a core file. Exploitation is possible only when the vulnerable guest runs in host-only...

CVE-2018-5516

CVE-2018-5516 affects F5 BIG-IP and related products where authenticated TMOS Shell (tmsh) access allows exfiltration of filesystem objects restricted by tmsh. Affected lines include BIG-IP versions 11.x–16.x, Enterprise Manager 3.x, BIG-IQ 4–7.x, and F5 iWorkflow 2.x. Root cause: tmsh restrictio...

CVE-2018-5519

CVE-2018-5519 affects F5 BIG-IP products where an administrator can exploit the ssldump utility to write to arbitrary file paths. The vulnerability arises in specific BIG-IP releases (LTM and related modules) and is exploitable by users with elevated or Appliance Mode access, enabling more permis...

CVE-2018-5516

On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.0.2-2.3.0, authenticated users granted TMOS Shell tmsh access can access objects on the file syste...

CVE-2018-5514

On F5 BIG-IP 13.1.0-13.1.0.5, maliciously crafted HTTP/2 request frames can lead to denial of service. There is data plane exposure for virtual servers when the HTTP2 profile is enabled. There is no control plane exposure to this issue...

CVE-2018-5519

On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.3, or 11.2.1-11.6.3.1, administrative users by way of undisclosed methods can exploit the ssldump utility to write to arbitrary file paths. For users who do not have Advanced Shell access for example, any user when licensed for Appliance Mode, this allo...