178 matches found
K00724442: BIG-IP DNS and GTM DNSSEC security exposure
Security Advisory Description The BIG-IP DNSSEC implementation returns an incorrect NSEC3 record for a DNS query for a resource record type, which does not exist at given name. The incorrect record indicates that only one of TXT/HINFO/RP resource record types exists at given name, even if A or AA...
K40181790: BIND vulnerability CVE-2016-9444
Security Advisory Description named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted DS resource record in an answer. CVE-2016-9444 Impact When the BIND...
K16349: Linux kernel vulnerability CVE-2009-0676
Security Advisory Description Description The sockgetsockopt function in net/core/sock.c in the Linux kernel before 2.6.28.6 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel memory via an SOBSDCOMPAT getsockopt reques...
K8939: SNMPv3 HMAC verification vulnerability CVE-2008-0960 - VU#878044
Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...
K12650: PHP vulnerability CVE-2010-4645
Security Advisory Description Note : For information about signing up to receive security notice updates from F5, refer to K9970: Subscribe to email notifications regarding F5 products and security announcements. Note : Versions that are not listed in this article have not been evaluated for...
K8106: OpenSSL SSL_get_shared_ciphers vulnerability CVE-2007-5135
Security Advisory Description Note : For information about signing up to receive security notice updates from F5, refer to K9970: Subscribe to email notifications regarding F5 products and security announcements. Note : Versions that are not listed in this article have not been evaluated for...
K16882: OpenLDAP vulnerability CVE-2013-4449
Security Advisory Description Description The rwm overlay in OpenLDAP 2.4.23, 2.4.36, and earlier does not properly count references, which allows remote attackers to cause a denial of service slapd crash by unbinding immediately after a search request, which triggers rwmconndestroy to free the...
K15746: Linux kernel vulnerability CVE-2012-4542
Security Advisory Description Description block/scsiioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during authorization of SCSI commands, which allows local users to bypass intended access restrictions via an SGIO ioctl call that leverages overlapping...
K16318: OpenSSL vulnerability CVE-2015-0287
Security Advisory Description The ASN1itemexd2i function in crypto/asn1/tasndec.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a does not reinitialize CHOICE and ADB data structures, which might allow attackers to cause a denial of service invalid wri...
K01471335: BIND vulnerability CVE-2016-2848
Security Advisory Description ISC BIND 9.1.0 through 9.8.4-P2 and 9.9.0 through 9.9.2-P2 allows remote attackers to cause a denial of service assertion failure and daemon exit via malformed options data in an OPT resource record. CVE-2016-2848 Impact A remote attacker may be able to cause a...
K14317: OpenSSH J-PAKE vulnerability CVE-2010-4478
OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate. F5 products do not include J-PAKE in the OpenSSH programs a...
K19784568: TMM vulnerability CVE-2016-5023
Security Advisory Description Virtual servers in F5 BIG-IP systems 11.2.1 HF11 through HF15, 11.4.1 HF4 through HF10, 11.5.3 through 11.5.4, 11.6.0 HF5 through HF7, and 12.0.0, when configured with a TCP profile, allow remote attackers to cause a denial of service Traffic Management Microkernel...
Buffer Overflow
fis-gtm is vulnerable to buffer overflow. The vulnerability exist inutilformat function in utilouput.c where the attacker can control the size of the memset by using a crafted input...
NULL Pointer Dereference
fis-gtm is vulnerable to null pointer difference. The vulnerability exist in FIS GT.M where the attacker uses a crafted input to causa a call to ZREAD to crash...
Denial Of Service (DoS)
fis-gtm is vulnerable to denial of service. The vulnerability exists due to lack of input validation in doverify.c which allows an attacker to crash the application by corrupting a function pointer...
Denial Of Service (DoS)
fis-gtm is vulnerable to denial of service. The vulnerability exists in due to null pointer dereference which allows an attacker to cause an application crash via malicious input...
Denial Of Service (DoS)
fis-gtm is vulnerable to denial of service. The vulnerability exists in iousopen function of srunix/iousopen.c due to lack of null checks which allows an attacker to cause an application crash by dereferencing a NULL pointer...
Denial Of Service (DoS)
fis-gtm is vulnerable denial of service. The vulnerability exists due to a segment fault in FIS GT.M where the attacker can cause a calculation of the size of call to memset in opfnj3 in srport/opfnj3.c to result in an extremely large value in order to crash the application...
Denial Of Service (DoS)
fis-gtm is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference in the function fincr in srport/fincr.c allowing an attacker to crash the system with a maliciously crafted input...
Buffer Overflow
fis-gtm:sid is vulnerable to buffer overflow.The vulnerability exists due improper configuration of buffer size which allows an attacker to crash the system via memcpy call...