PT-2025-42323

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description When a TCP profile with Multipath TCP MPTC enabled is configured on a virtual server, undisclosed traffic, along with conditions beyond the attacker's control, can cause the Traffic...

PT-2025-42334

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Advanced WAF and ASM affected versions not specified Description When configured with a server-side HTTP/2 profile and a security policy, the Traffic Management Microkernel TMM may terminate due to undisclosed traffic. This can lead ...

CVE-2024-21849

When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Design/Logic Flaw

When a BIG-IP PEM classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. This issue affects classification engines using signatures released between 09-08-2022 and 02-16-2023. See the table in the F5 Securi...

CVE-2024-21849 BIG-IP Websockets vulnerability

When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2022-35245: NULL Pointer Dereference

In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5.1, when a BIG-IP APM access policy is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of...

CVE-2022-34844: Improper Input Validation

In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, and all versions of BIG-IQ 8.x, when the Data Plane Development Kit DPDK/Elastic Network Adapter ENA driver is used with BIG-IP or BIG-IQ on Amazon Web Services AWS systems, undisclosed traffic can cause the Traffic Management...

CVE-2022-26071: Use of Insufficiently Random Values

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a flaw in the way reply ICMP packets are limited in the Traffic Management Microkernel TMM allows an attack...

CVE-2022-23025: NULL Pointer Dereference

On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, when a SIP ALG profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reache...

CVE-2022-23021: NULL Pointer Dereference

On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate: HTTP redirect rule in an LTM policy, BIG-IP APM Access Profile, and Explicit HTTP Proxy in HTTP...

PT-2022-15786

Name of the Vulnerable Software and Affected Versions BIG-IP AFM versions 13.1.3.4 through 16.1.x before 16.1.2 BIG-IP AFM versions 14.1.x before 14.1.4.5 BIG-IP AFM versions 15.1.x before 15.1.4.1 Description When a virtual server is configured with both HTTP protocol security and HTTP Proxy...

PT-2021-15363

Name of the Vulnerable Software and Affected Versions BIG-IP versions 12.1.x BIG-IP versions 13.1.x BIG-IP versions 14.1.x through 14.1.2.7 BIG-IP versions 15.1.x through 15.1.2 BIG-IP versions 16.0.x through 16.0.1.1 Description When IPSec is configured on a BIG-IP system, undisclosed requests...

PT-2020-16782

Name of the Vulnerable Software and Affected Versions BIG-IP LTM/CGNAT versions 13.1.0 through 13.1.3.5 BIG-IP LTM/CGNAT versions 14.1.0 through 14.1.3 BIG-IP LTM/CGNAT versions 15.1.0 through 15.1.0.5 BIG-IP LTM/CGNAT versions 16.0.0 through 16.0.0.1 Description The issue occurs when processing...

PT-2020-18837

Name of the Vulnerable Software and Affected Versions BIG-IP Virtual Edition VE versions 13.1.0 through 13.1.3.4 BIG-IP Virtual Edition VE versions 14.1.0 through 14.1.2.6 BIG-IP Virtual Edition VE versions 15.0.0 through 15.0.1.3 BIG-IP Virtual Edition VE versions 15.1.0 through 15.1.0.3 BIG-IP...

CVE-2020-5937: Undefined Security Weakness

On BIG-IP AFM 15.1.0-15.1.0.5, the Traffic Management Microkernel TMM may produce a core file while processing layer 4 L4 behavioral denial-of-service DoS traffic...