F5 Networks BIG-IP : TMM vulnerability (K25573437)

Malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs. CVE-2018-5517 Impact This vulnerability allows remotedisruption of...

The vulnerability of the System.IO.Pipelines library in .NET Core and ASP.NET Core programming frameworks allows attackers to induce service interruptions.

The vulnerability of the System.IO.Pipelines library in .NET Core and ASP.NET Core applications is related to request processing errors. Exploiting this vulnerability allows an attacker to cause service failures through a specially crafted request...

The vulnerability of Siemens SCALANCE X300 industrial switches’ web servers allows a hacker to trigger a service failure.

The vulnerability of Siemens SCALANCE X300 industrial switches involves insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to trigger service interruptions by sending specially crafted packets to the TCP port 443...

The vulnerability of the password-changing function of the Cisco Prime Collaboration Provisioning software for centralized management of Cisco products allows a hacker to trigger a service failure.

The vulnerability of the password-changing function of the Cisco Prime Collaboration Provisioning PCP software for centralized product management involves an authentication error. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Cisco TelePresence Video Communication Server Expressway Denial of Service Vulnerability

A vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server VCS Expressway could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to exhaustion of file descriptors while processing a high volume of...

Multiple vulnerabilities in the Application Layer Protocol Inspection component of Cisco microprogrammed network interface devices, which allow attackers to cause service failures.

The multiple vulnerabilities of the Application Layer Protocol Inspection component in Cisco microprogrammed network interfaces are related to resource management errors. Exploiting these vulnerabilities could allow a malicious actor to cause service interruptions by sending large amounts of...

The vulnerability of the routing mechanism implemented by the Forwarding Information Base (FIB) in the Cisco IOS XE operating system allows a attacker to cause a service failure.

The vulnerability of the routing mechanism that implements the Forwarding Information Base FIB in the Cisco IOS XE operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Integrated Services Module (ISM-VPN) of the Cisco IOS operating system, which allows a hacker to cause a service failure.

The vulnerability of the Integrated Services Module ISM-VPN of the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted VPN traffic...

CVE-2018-5517

The CVE-2018-5517 issue affects F5 BIG-IP TMM handling for self IPs and FastL4, where malformed TCP packets can cause data-plane denial of service. Linked advisory K25573437 states vulnerable BIG-IP versions include 13.1.0 (up to 13.1.0.6) and 14.x; fixes are introduced in 13.1.0.6 and 14.0.0. Th...

CVE-2018-5517

On F5 BIG-IP 13.1.0-13.1.0.5, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs...

The vulnerability of the Junos operating system, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of the Junos operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...

The vulnerability of the libhevc library in the Media Framework of the Android operating system allows a hacker to induce a service failure.

The vulnerability of the libhevc library in the Media Framework component of the Android operating system is related to improper error handling during memory allocation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Vulnerability of the Server:Security:Privileges component of the MySQL database management system, which allows a hacker to cause a service failure

The vulnerability of the Server:Security:Privileges component of the MySQL database management system is related to security configuration errors. Exploiting this vulnerability may allow a malicious actor to cause service interruptions by modifying system data remotely...

Vulnerability of the mp4ff_read_ctts function in the audio file decoder Freeware Advanced Audio Decoder 2, allowing a hacker to cause a service failure

The vulnerability of the mp4ffreadctts function common/mp4ff/mp4atom.c in the Freeware Advanced Audio Decoder 2 decoder is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially crafted mp4 file...

The vulnerability of the uncompress function in ImfZip.cpp of the OpenEXR library, which allows a hacker to trigger a service failure

The vulnerability of the uncompress function in the ImfZip.cpp library related to numerical processing errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the aiff_open function (oggenc/audio.c) in the vorbis-tools package allows a hacker to cause a service failure.

The vulnerability of the aiffopen function oggenc/audio.c in the vorbis-tools package arises from operations that occur outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions by using a specially created AIFF file...

The vulnerability of MySQL and MariaDB database drivers for the Perl Database Interface (DBI) relates to buffer overflow attacks, allowing attackers to cause service interruptions.

The vulnerability of the MySQL and MariaDB database drivers for the Perl Database Interface DBI arises due to buffer overflow. Exploiting this vulnerability allows an attacker to trigger a fixed-length buffer error message, leading to a crash error FORTIFYSOURCE. This potentially results in servi...

The vulnerability of the clusterLoadConfig function in the Redis database management system allows a attacker to cause service interruptions or other adverse effects.

The vulnerability of the clusterLoadConfig function in the Redis database management system arises from an operation that occurs outside the buffer in memory, due to the lack of checks on the values of migratingslotsto and migratingslotsfrom, which are defined in the configuration file. Exploitin...

App Layering: System -> Settings and Configuration Page Hangs at "In Progress", Management Console Page Timesout 5 Minutes Later

When browsing in the App Layering Management Console web page to the System - Settings and Configuration page, a box saying "In Progress..." pops up in the middle of the HTTP Certificate Settings section, and the page never finishes populating. 5 minutes later, the entire management console web...

CVE-2017-6147

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of service when "SSL Forward Proxy" setting is enabled in both the Client and Server SSL profiles...