PT-2024-29303 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP affected versions not specified Description: The issue occurs when a TCP profile with Multipath TCP enabled MPTCP is configured on a Virtual Server. Undisclosed traffic, along with conditions beyond the attacker's control, can cause th...

CVE-2024-40416

A vulnerability in /goform/SetVirtualServerCfg in the sub6320C function in Tenda AX1806 1.0.0.1 firmware leads to stack-based buffer overflow...

Tenda AX1806 安全漏洞

The Tenda AX1806 is a WiFi6 wireless router from Tenda, a Chinese company. A stack buffer overflow vulnerability exists in the Tenda AX1806 sub519F4 function, which originates when /goform/SetVirtualServerCfg fails to properly validate the length and size of the input data, and can be exploited b...

PT-2024-28839 · Tenda · Tenda Ax1806

Name of the Vulnerable Software and Affected Versions: Tenda AX1806 version 1.0.0.1 Description: A stack-based buffer overflow issue exists due to a vulnerability in the /goform/SetVirtualServerCfg endpoint, specifically within the sub 6320C function. This allows for potential exploitation...

PT-2024-29871

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description The issue is related to the ipvs module in the Linux kernel, where a vulnerability has been resolved by properly dereferencing pe in ip vs add service. This change also resolves a sparse warnin...

kernel: ipv4: NULL pointer dereference in ipv4_send_dest_unreach()

A NULL pointer dereference flaw was found in the Linux kernel ipv4 stack. The socket buffer skb was assumed to be associated with a device before calling ipoptionscompile, which is not always the case if the skb is re-routed by ipvs. This issue may allow a local user with CAPNETADMIN privileges t...

How To: Allow authentication bypass for specific URLs on virtual server with authentication enabled

In this scenario, the objective is to allow some specific URL path i.e. "www.mydomain.com/myallowedpath " to be accessed without requiring authentication when that resource is hosted behind a virtual server LB/CS that has authentication enabled. Such that, when a user accesseswww.mydomain.com or...

F5 Networks BIG-IP : BIG-IP SSL vulnerability (K000138912)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.4 / 16.1.4.3 / 17.1.1.3. It is, therefore, affected by a vulnerability as referenced in the K000138912 advisory. - When an SSL profile with alert timeout is configured with a non-default value on a virtual server,...

CVE-2024-33608

When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-33608

When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-28889

When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical...

CVE-2024-28889

CVE-2024-28889 affects F5 BIG-IP SSL when an SSL profile with alert timeout is set to a non-default value, causing the Traffic Management Microkernel (TMM) to terminate and disrupt traffic (DoS). Affected branches and fixes per K000138912: BIG-IP (all modules) 17.1.0–17.1.1 vulnerable; fixed in 1...

CVE-2024-28889 BIG-IP SSL vulnerability

When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical...

CVE-2024-28889 BIG-IP SSL vulnerability

When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical...

CVE-2024-33608

CVE-2024-33608 affects F5 BIG-IP IPsec vulnerability. When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate, resulting in a DoS on the BIG-IP data plane. CVSS v3.1 score is 7.5 (NETWORK, LOW attack complexity, no user int...

PT-2024-25373 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP affected versions not specified Description: When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Recommendations: At the moment, there is no information about...

F5 BIG-IP Next 安全漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A denial of service vulnerability exists in F5 BIG-IP SSL that originates from an attacker being able to cause the Traffic...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A denial-of-service vulnerability exists in F5 BIG-IP IPsec, which is due to a flaw in the configuration of IPsec on a virtual...

PT-2024-22629 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP versions prior to 17.0.0 Description: When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic...

CVE-2024-4112

A vulnerability classified as critical has been found in Tenda TX9 22.03.02.10. This affects the function sub42CB94 of the file /goform/SetVirtualServerCfg. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...