PT-2025-42334

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Advanced WAF and ASM affected versions not specified Description When configured with a server-side HTTP/2 profile and a security policy, the Traffic Management Microkernel TMM may terminate due to undisclosed traffic. This can lead ...

PT-2025-42323

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description When a TCP profile with Multipath TCP MPTC enabled is configured on a virtual server, undisclosed traffic, along with conditions beyond the attacker's control, can cause the Traffic...

CVE-2024-21849

When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Design/Logic Flaw

When a BIG-IP PEM classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. This issue affects classification engines using signatures released between 09-08-2022 and 02-16-2023. See the table in the F5 Securi...

CVE-2024-21849 BIG-IP Websockets vulnerability

When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2022-34844: Improper Input Validation

In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, and all versions of BIG-IQ 8.x, when the Data Plane Development Kit DPDK/Elastic Network Adapter ENA driver is used with BIG-IP or BIG-IQ on Amazon Web Services AWS systems, undisclosed traffic can cause the Traffic Management...

CVE-2022-35245: NULL Pointer Dereference

In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5.1, when a BIG-IP APM access policy is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of...

CVE-2022-26071: Use of Insufficiently Random Values

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a flaw in the way reply ICMP packets are limited in the Traffic Management Microkernel TMM allows an attack...

CVE-2022-23021: NULL Pointer Dereference

On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate: HTTP redirect rule in an LTM policy, BIG-IP APM Access Profile, and Explicit HTTP Proxy in HTTP...

CVE-2022-23025: NULL Pointer Dereference

On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, when a SIP ALG profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reache...

PT-2022-15786

Name of the Vulnerable Software and Affected Versions BIG-IP AFM versions 13.1.3.4 through 16.1.x before 16.1.2 BIG-IP AFM versions 14.1.x before 14.1.4.5 BIG-IP AFM versions 15.1.x before 15.1.4.1 Description When a virtual server is configured with both HTTP protocol security and HTTP Proxy...

PT-2021-15363

Name of the Vulnerable Software and Affected Versions BIG-IP versions 12.1.x BIG-IP versions 13.1.x BIG-IP versions 14.1.x through 14.1.2.7 BIG-IP versions 15.1.x through 15.1.2 BIG-IP versions 16.0.x through 16.0.1.1 Description When IPSec is configured on a BIG-IP system, undisclosed requests...

PT-2020-16782

Name of the Vulnerable Software and Affected Versions BIG-IP LTM/CGNAT versions 13.1.0 through 13.1.3.5 BIG-IP LTM/CGNAT versions 14.1.0 through 14.1.3 BIG-IP LTM/CGNAT versions 15.1.0 through 15.1.0.5 BIG-IP LTM/CGNAT versions 16.0.0 through 16.0.0.1 Description The issue occurs when processing...

PT-2020-18837

Name of the Vulnerable Software and Affected Versions BIG-IP Virtual Edition VE versions 13.1.0 through 13.1.3.4 BIG-IP Virtual Edition VE versions 14.1.0 through 14.1.2.6 BIG-IP Virtual Edition VE versions 15.0.0 through 15.0.1.3 BIG-IP Virtual Edition VE versions 15.1.0 through 15.1.0.3 BIG-IP...

CVE-2020-5937: Undefined Security Weakness

On BIG-IP AFM 15.1.0-15.1.0.5, the Traffic Management Microkernel TMM may produce a core file while processing layer 4 L4 behavioral denial-of-service DoS traffic...

CVE-2017-6137

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2, undisclosed traffic patterns received while software SYN cookie protection is engaged may cause a disrupti...