Authentication flaw

On F5 BIG-IP 13.0.0-13.1.0.5, using RADIUS authentication responses from a RADIUS server with IPv6 addresses may cause TMM to crash, leading to a failover event...

CVE-2018-5515

On F5 BIG-IP 13.0.0-13.1.0.5, using RADIUS authentication responses from a RADIUS server with IPv6 addresses may cause TMM to crash, leading to a failover event...

CVE-2018-5515

On F5 BIG-IP 13.0.0-13.1.0.5, using RADIUS authentication responses from a RADIUS server with IPv6 addresses may cause TMM to crash, leading to a failover event...

CVE-2018-5515

CVE-2018-5515 affects F5 BIG-IP BIG-IP LTM and related modules when RADIUS authentication responses come from an IPv6 RADIUS server. The root issue is a crash in the Traffic Management Microkernel (TMM) that causes a TMM core dump and a failover event, observed when BIG-IP administrative users us...

How to Back Up a Windows Failover Cluster with Veeam Agent for Microsoft Windows

Solution Information regarding Failover Cluster Support is available in the Veeam Agent Management Guide: Failover Cluster Support How to Protect Failover Clusters If this KB article did not resolve your issue or you need further assistance with Veeam software, please create a Veeam Support Case...

F5 BIG-IP Denial of Service Vulnerability (CNVD-2018-06872)

F5 BIG-IP LTM, etc. are products of F5 Corporation, U.S.A. F5 BIG-IP LTM is a local traffic manager; BIG-IP AAM is an application acceleration manager. A security vulnerability exists in several F5 products. An attacker could exploit the vulnerability to cause the TMM to crash and cause it to...

OracleVM 3.4 : dhcp (OVMSA-2018-0023)

The remote OracleVM system is missing necessary patches to address critical security updates : - Added oracle-errwarn-message.patch - Resolves: 1550085 - CVE-2018-5733 Avoid reference overflow 12:4.1.1-53.P1.2 - Resolves: 1550083 - CVE-2018-5732 Avoid options buffer overflow - Resolves: 1063217 -...

OracleVM 3.3 : dhcp (OVMSA-2018-0024)

The remote OracleVM system is missing necessary patches to address critical security updates : - Added oracle-errwarn-message.patch - Resolves: 1550085 - CVE-2018-5733 Avoid reference overflow 12:4.1.1-53.P1.2 - Resolves: 1550083 - CVE-2018-5732 Avoid options buffer overflow - Resolves: 1063217 -...

F5 Unspecified Vulnerability in BIG-IP ASM

F5 BIG-IP ASM Application Security Manager is a Web Application Firewall WAF from F5 USA that provides secure remote access, protects email, and simplifies Web access control while enhancing network and application performance. A security vulnerability exists in the F5 BIG-IP ASM. An attacker cou...

F5 BIG-IP Access Policy Manager Denial of Service Vulnerability

F5 BIG-IP Access Policy Manager APM is a suite of access and security solutions from F5 USA. The solution provides unified access to business-critical applications and networks. A security vulnerability exists in the F5 BIG-IP APM. An attacker could exploit this vulnerability to corrupt traffic o...

Denial of Service Vulnerability in Multiple F5 Products (CNVD-2018-01147)

F5 BIG-IP LTM, etc. are products of F5 Corporation, U.S.A. F5 BIG-IP LTM is a local traffic manager; BIG-IP AAM is an application acceleration manager. A security vulnerability exists in several F5 products. An attacker could exploit this vulnerability to corrupt traffic or cause the BIG-IP to...

CVE-2017-6129

In F5 BIG-IP APM software version 13.0.0 and 12.1.2, in some circumstances, APM tunneled VPN flows can cause a VPN/PPP connflow to be prematurely freed or cause TMM to stop responding with a "flow not in use" assertion. An attacker may be able to disrupt traffic or cause the BIG-IP system to fail...

CVE-2017-6129

Summary: CVE-2017-6129 affects F5 BIG-IP APM (versions 13.0.0 and 12.1.2). The vulnerability arises when APM tunneled VPN flows cause a VPN/PPP connflow to be prematurely freed or trigger TMM to assert “flow not in use,” potentially disrupting traffic or causing failover within the device group. ...

Veeam Availability Console Cumulative Patch 1376

Challenge Veeam Availability Console Cumulative Patch 1376 Cause Please confirm you are running version 2.0.1.1319 or later prior to installing this cumulative hotfix 1376. You can check this under Windows Programs and features. After upgrading, your build will be version 2.0.1.1376. As a result ...

Update Rollup 14 for System Center 2012 R2 Virtual Machine Manager

Update Rollup 14 for System Center 2012 R2 Virtual Machine Manager Introduction This article describes the issues that are fixed in Update Rollup 14 for Microsoft System Center 2012 R2 Virtual Machine Manager. There are two updates available for Virtual Machine Manager, one for the Virtual Machin...

Denial of Service Vulnerability in Multiple F5 Products (CNVD-2017-37740)

F5 BIG-IP LTM, etc. are products of F5 Corporation, U.S.A. F5 BIG-IP LTM is a local traffic manager; BIG-IP AAM is an application acceleration manager. A denial of service vulnerability exists in multiple F5 products. An attacker could exploit this vulnerability to create a core file that...

Code injection

In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel TMM may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4...

CVE-2017-6166

In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel TMM may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4...

CVE-2017-6166

In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel TMM may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4...

CVE-2017-6166

In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel TMM may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4...