Code injection

In BIG-IP APM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, on systems running more than one TMM instance, authenticated VPN users may consume excessive resources by sending specially-crafted malicious traffic ove...

CVE-2020-27722

In BIG-IP APM versions 15.0.0-15.0.1.3, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, under certain conditions, the VDI plugin does not observe plugin flow-control protocol causing excessive resource consumption...

CVE-2020-27722

The CVE-2020-27722 vulnerability affects BIG-IP APM with VDI traffic. Affected versions are BIG-IP APM: 15.0.0–15.0.1.3, 14.1.0–14.1.3, and 13.1.0–13.1.3.4. The root cause is that the VDI plugin does not observe the plugin flow-control protocol, leading to excessive resource consumption on proces...

CVE-2020-27724

The CVE-2020-27724 entry concerns F5 BIG-IP APM with multiple TMM instances where authenticated VPN users can exhaust resources by sending crafted traffic through the VPN tunnel. Affected releases include BIG-IP APM 16.x (16.0.0–16.0.0.1), 15.x (15.1.0–15.1.0.4, 15.0.0–15.0.1.3), 14.x (14.1.0–14....

CVE-2020-27724

In BIG-IP APM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, on systems running more than one TMM instance, authenticated VPN users may consume excessive resources by sending specially-crafted malicious traffic ove...

PT-2020-16784

Name of the Vulnerable Software and Affected Versions BIG-IP APM versions 13.1.0 through 13.1.3.4 BIG-IP APM versions 14.1.0 through 14.1.3 BIG-IP APM versions 15.0.0 through 15.0.1.3 Description The VDI plugin in BIG-IP APM does not observe plugin flow-control protocol under certain conditions,...

CVE-2020-27724: Uncontrolled Resource Consumption

In BIG-IP APM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, on systems running more than one TMM instance, authenticated VPN users may consume excessive resources by sending specially-crafted malicious traffic ove...

CVE-2020-27722: Uncontrolled Resource Consumption

In BIG-IP APM versions 15.0.0-15.0.1.3, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, under certain conditions, the VDI plugin does not observe plugin flow-control protocol causing excessive resource consumption...

PT-2020-16786

Name of the Vulnerable Software and Affected Versions BIG-IP APM versions 11.6.1 through 11.6.5.2 BIG-IP APM versions 12.1.0 through 12.1.5.2 BIG-IP APM versions 13.1.0 through 13.1.3.4 BIG-IP APM versions 14.1.0 through 14.1.3 BIG-IP APM versions 15.0.0 through 15.0.1.3 BIG-IP APM versions 15.1....

CVE-2018-1000892

Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when receiving sendheaders messages...

CVE-2018-1000893

Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when deserializing transactions...

CVE-2018-1000891

Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when receiving messages with invalid checksums...

CVE-2018-1000891

Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when receiving messages with invalid checksums...

CVE-2018-1000893

Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when deserializing transactions...

CVE-2018-1000892

Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when receiving sendheaders messages...

Design/Logic Flaw

Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when receiving sendheaders messages...

Code injection

Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when deserializing transactions...

Design/Logic Flaw

Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when receiving messages with invalid checksums...

CVE-2018-1000893

Bitcoin SV before 0.1.1 allows uncontrolled resource consumption when deserializing transactions...

CVE-2018-1000893

CVE-2018-1000893 affects Bitcoin SV prior to 0.1.1, where deserializing transactions can cause uncontrolled resource consumption (DoS). The vulnerability is documented across multiple sources (e.g., Red Hat and SUSE entries reiterate the same description). The known impact is partial availability...