CVE-2016-7475

CVE-2016-7475 affects F5 BIG-IP SPDY and HTTP/2 profiles where the Traffic Management Microkernel (TMM) may fail to properly clean up pool member connections. Affected: BIG-IP LTM and related modules on versions including 12.0.0–12.1.0, 11.4.0–11.6.1 (and some later 11.x/12.x entries listed by th...

A sample to set http response header X-Frame-Options by rewrite policy

A sample to set http response header X-Frame-Options by rewrite policy on vpn vserver...

F5 BIG-IP Access Policy Manager Virtual Server Denial of Service Vulnerability

F5 BIG-IP Access Policy Manager APM is a suite of access and security solutions from F5 USA. The solution provides unified access to business-critical applications and networks. A security vulnerability exists in the F5 BIG-IP APM virtual server. When the server is configured with an APM...

F5 BIG-IP Virtual Server Denial of Service Vulnerability

F5 BIG-IP LTM, etc. are products of F5 Corporation, U.S.A. F5 BIG-IP LTM is a local traffic manager; BIG-IP AAM is an application acceleration manager. A security vulnerability exists in the F5 BIG-IP virtual server. An attacker can exploit this vulnerability to cause a denial of service abnormal...

PT-2018-17030

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM versions 12.1.0 through 12.1.3.5 F5 BIG-IP APM versions 13.0.0 through 13.1.0.7 Description A remote attacker may exploit an F5 BIG-IP APM virtual server configured with an APM per-request policy object, causing a memory leak in...

PT-2018-17031

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.2.1 through 11.5.6 F5 BIG-IP versions 11.6.0 through 11.6.3.1 F5 BIG-IP versions 12.1.0 through 12.1.3.5 F5 BIG-IP versions 13.0.0 through 13.1.0.5 Description A remote attacker may disrupt services if the TMM virtual...

F5 BIG-IP Denial of Service Vulnerability (CNVD-2019-19064)

F5 BIG-IP is an all-in-one network appliance that integrates network traffic management, application security management, load balancing and other functions from F5 USA. A denial-of-service vulnerability exists in F5 BIG-IP versions 13.0.0 through 13.1.0, 12.1.0 through 12.1.3, and 11.2.1 through...

Denial of service

On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed by a Virtual Server with an associated QoE profile that has Video enabled, may cause TMM to incorrectly buffer response data causing the TMM to restart resulting in a Denial of...

PT-2018-17029

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.1 through 11.6.3 F5 BIG-IP versions 12.1.0 through 12.1.3 F5 BIG-IP versions 13.0.0 through 13.1.0 F5 BIG-IP version 14.0.0 Description The issue occurs when specifically crafted HTTP responses are processed by a Virtua...

CVE-2018-5535: Improper Input Validation

On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed by a Virtual Server with an associated QoE profile that has Video enabled, may cause TMM to incorrectly buffer response data causing the TMM to restart resulting in a Denial of...

CVE-2018-5517

On F5 BIG-IP 13.1.0-13.1.0.5, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs...

PT-2018-17011

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 13.1.0 through 13.1.0.5 Description The issue is caused by malformed TCP packets sent to a self IP address or a FastL4 virtual server, which may result in an interruption of service. This issue affects the data plane virtual...

CVE-2018-5508

On F5 BIG-IP PEM versions 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.5.1-11.5.5, or 11.2.1, under certain conditions, TMM may crash when processing compressed data though a Virtual Server with an associated PEM profile using the content insertion option...

Information disclosure

On F5 BIG-IP PEM versions 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.5.1-11.5.5, or 11.2.1, under certain conditions, TMM may crash when processing compressed data though a Virtual Server with an associated PEM profile using the content insertion option...

CVE-2018-5508

On F5 BIG-IP PEM versions 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.5.1-11.5.5, or 11.2.1, under certain conditions, TMM may crash when processing compressed data though a Virtual Server with an associated PEM profile using the content insertion option...

CVE-2018-5508

On F5 BIG-IP PEM versions 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.5.1-11.5.5, or 11.2.1, under certain conditions, TMM may crash when processing compressed data though a Virtual Server with an associated PEM profile using the content insertion option...

CVE-2017-6155

On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or HTTP/2 requests may result in a disruption of service to TMM. Data plane is only exposed when a SPDY or HTTP/2 profile is attached to a virtual server. There is no control plane exposure...

CVE-2018-5508

CVE-2018-5508 affects F5 BIG-IP PEM (PEM profile with content insertion) and can cause the Traffic Management Microkernel (TMM) to crash, generate a core file, and restart under certain conditions when processing compressed data. Affected versions: BIG-IP PEM 13.0.0; 12.0.0–12.1.3.1; 11.6.0–11.6....

CVE-2017-6155

The CVE-2017-6155 issue affects F5 BIG-IP TMM in versions with SPDY or HTTP/2 profiles (BIG-IP 11.2.x, 11.4.1–11.5.5, 11.6.0–11.6.2, 12.0.0–12.1.3.1, 13.0.0). Malformed SPDY/HTTP/2 requests can disrupt service on TMM when such profiles are attached; no control-plane exposure is reported. Impact i...

PT-2018-8296

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.1 through 11.5.5 F5 BIG-IP versions 11.6.1 through 11.6.2 F5 BIG-IP versions 12.0.0 through 12.1.3.1 F5 BIG-IP version 13.0.0 Description The issue affects the data plane when a SOCKS proxy profile is attached to a...