Lucene search
+L

6519 matches found

F5 Networks
F5 Networks
•added 2023/02/21 6:55 p.m.•54 views

K23454411: DNS profile vulnerability CVE-2022-26372

Security Advisory Description When a DNS listener is configured on a virtual server with DNS queueing default, undisclosed requests can cause an increase in memory resource utilization. CVE-2022-26372 Impact System performance can degrade until the Traffic Management Microkernel TMM process is...

7.5CVSS7.4AI score0.00868EPSS
SaveExploits0Affected Software13
F5 Networks
F5 Networks
•added 2023/02/21 6:55 p.m.•54 views

K17309: Linux kernel vulnerability CVE-2015-5366

Security Advisory Description The 1 udprecvmsg and 2 udpv6recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return values, which allows remote attackers to cause a denial of service EPOLLET epoll application read outage via an incorrect checksum in a UDP packet, a...

5CVSS6.8AI score0.06245EPSS
SaveExploits0Affected Software25
F5 Networks
F5 Networks
•added 2023/02/21 6:55 p.m.•54 views

K41523201: cURL vulnerability CVE-2019-5482

Security Advisory Description Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. CVE-2019-5482 Impact An attacker could cause a denial of service DoS or arbitrary code execution if you use cURL to transfer data to or from a Trivial File Transport Protocol TFTP server and...

9.8CVSS7.5AI score0.17939EPSS
SaveExploits0Affected Software16
F5 Networks
F5 Networks
•added 2023/02/21 6:54 p.m.•54 views

K02354867: Kernel vulnerability CVE-2020-10711

Security Advisory Description A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option CIPSO protocol's category bitmap into the SELinux extensible bitmap via the'...

5.9CVSS6.1AI score0.03097EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:54 p.m.•54 views

K41412302: Jetty vulnerability CVE-2019-10247

Security Advisory Description In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not...

5.3CVSS6.6AI score0.05782EPSS
SaveExploits0Affected Software2
F5 Networks
F5 Networks
•added 2023/02/21 6:53 p.m.•54 views

K83181523: PHP vulnerability CVE-2018-10546

Security Advisory Description An issue was discovered in PHP before 5.6.36, 7.0.x before 7.0.30, 7.1.x before 7.1.17, and 7.2.x before 7.2.5. An infinite loop exists in ext/iconv/iconv.c because the iconv stream filter does not reject invalid multibyte sequences. CVE-2018-10546 Impact There is no...

7.5CVSS7AI score0.10433EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:53 p.m.•54 views

K54039800: MatrixSSL vulnerability CVE-2016-6883

Security Advisory Description MatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain sensitive information via a Bleichenbacher variant attack. CVE-2016-6883 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status...

5.9CVSS6.4AI score0.13906EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:53 p.m.•54 views

K63525058: cURL vulnerability CVE-2020-8284

Security Advisory Description A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doin...

4.3CVSS6.6AI score0.03851EPSS
SaveExploits0Affected Software17
F5 Networks
F5 Networks
•added 2023/02/21 6:53 p.m.•54 views

K19240391: Apache Tomcat vulnerability CVE-2020-11996

Security Advisory Description A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage for several seconds. If a sufficient number of such requests were made on concurrent HTTP/2 connections,...

7.5CVSS8.5AI score0.26699EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:52 p.m.•54 views

K43223005: PHP vulnerability CVE-2018-5711

Security Advisory Description gdgifin.c in the GD Graphics Library aka libgd, as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error that leads to an infinite loop via a crafted GIF file, as demonstrated by a call to the...

5.5CVSS6.4AI score0.13204EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2023/02/21 6:49 p.m.•54 views

K25370250: Linux kernel vulnerability CVE-2020-10690

Security Advisory Description There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptpclock and cdev while resource deallocation. When a high privileged process allocates a ptp device file like /dev/ptpX and voluntarily goes to sleep. During this...

6.5CVSS6.6AI score0.00359EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:48 p.m.•54 views

K11271225: BIND vulnerability CVE-2022-0635

Security Advisory Description Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually terminate due to a failed assertion check. CVE-2022-0635 Impact There is no impact; F5 products are not affected by this...

7.5CVSS7.5AI score0.01327EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:48 p.m.•54 views

K19443402: BIND vulnerability CVE-2021-25216

Security Advisory Description In BIND 9.5.0 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.11.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 - 9.17.1 of the BIND 9.17 development branch, BIND servers are vulnerable if they are...

9.8CVSS8.6AI score0.82367EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:48 p.m.•54 views

K72255110: MySQL vulnerability CVE-2016-6662

Security Advisory Description Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to creat...

10CVSS8.8AI score0.6773EPSS
SaveExploits16
F5 Networks
F5 Networks
•added 2023/02/21 6:47 p.m.•54 views

K30905674: Linux kernel vulnerability CVE-2014-9904

Security Advisory Description The sndcompresscheckinput function in sound/core/compressoffload.c in the ALSA subsystem in the Linux kernel before 3.17 does not properly check for an integer overflow, which allows local users to cause a denial of service insufficient memory allocation or possibly...

7.8CVSS6.9AI score0.00384EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:47 p.m.•54 views

K63176101: Linux kernel vulnerability CVE-2019-17055

Security Advisory Description basesockcreate in drivers/isdn/mISDN/socket.c in the AFISDN network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21. CVE-2019-17055 Impact There is no impact; F5...

3.3CVSS6.3AI score0.00542EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:35 p.m.•54 views

K42202505: Linux kernel vulnerability CVE-2018-1120

Security Advisory Description A flaw was found affecting the Linux kernel before version 4.17. By mmaping a FUSE-backed file onto a process's memory containing command line arguments or environment strings, an attacker can cause utilities from psutils or procps such as ps, w or any other program...

5.3CVSS6.2AI score0.07291EPSS
SaveExploits5Affected Software16
F5 Networks
F5 Networks
•added 2023/02/21 6:34 p.m.•54 views

K20486351: glibc vulnerability CVE-2017-1000366

Security Advisory Description glibc contains a vulnerability that allows specially crafted LDLIBRARYPATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent...

7.8CVSS8AI score0.02733EPSS
SaveExploits14Affected Software23
F5 Networks
F5 Networks
•added 2023/02/21 6:34 p.m.•54 views

K43232343: Linux kernel Vulnerability CVE-2021-31440

Security Advisory Description This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

8.8CVSS7.9AI score0.01754EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2023/02/21 6:34 p.m.•55 views

K76328112: BIG-IP TMM vulnerability CVE-2019-6683

Security Advisory Description BIG-IP virtual servers with Loose Initiation enabled on a FastL4 profile may be subject to excessive flow usage under undisclosed conditions. CVE-2019-6683 Impact This vulnerability is present only on BIG-IP Virtual Edition VE systems with limited bandwidth licenses...

7.5CVSS7.3AI score0.01014EPSS
SaveExploits0Affected Software13
F5 Networks
F5 Networks
•added 2023/02/21 6:34 p.m.•54 views

K52494562: BIG-IP software SYN cookies vulnerability CVE-2022-36795

Security Advisory Description When an LTM TCP profile configured on a virtual server has the Auto Receive Window option enabled, undisclosed traffic can cause the virtual server to stop processing new client connections. CVE-2022-36795 Impact Traffic is disrupted for new IP requests. This...

7.5CVSS7.6AI score0.00633EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:33 p.m.•55 views

K03710547: Linux RPM vulnerability CVE-2017-7501

Security Advisory Description It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. An attacker with ability to write in a directory where files will be installed could create symbolic links to an arbitrary location and modify content...

7.8CVSS7.6AI score0.00392EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 6:33 p.m.•54 views

K22854723: Poppler vulnerability CVE-2018-10768

Security Advisory Description There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an Ubuntu package for Poppler 0.24.5. A crafted input will lead to a remote denial of service attack. Later Ubuntu packages such as for Poppler 0.41.0 are not affected...

6.5CVSS5.8AI score0.02435EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2023/02/21 6:30 p.m.•54 views

K16915: OpenSSL vulnerability CVE-2015-1792

Security Advisory Description The dofreeupto function in crypto/cms/cmssmime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0.2b allows remote attackers to cause a denial of service infinite loop via vectors that trigger a NULL value of a BIO data...

5CVSS7.8AI score0.22476EPSS
SaveExploits0Affected Software19
F5 Networks
F5 Networks
•added 2023/02/21 6:19 p.m.•54 views

K17239: Linux kernel vulnerability CVE-2014-9529

Security Advisory Description Race condition in the keygcunusedkeys function in security/keys/gc.c in the Linux kernel through 3.18.2 allows local users to cause a denial of service memory corruption or panic or possibly have unspecified other impact via keyctl commands that trigger access to a k...

6.9CVSS6.9AI score0.00336EPSS
SaveExploits0Affected Software20
F5 Networks
F5 Networks
•added 2023/02/21 6:18 p.m.•54 views

K93122894: OpenSSL vulnerability CVE-2016-0705

Security Advisory Description Double free vulnerability in the dsaprivdecode function in crypto/dsa/dsaameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a malformed DS...

10CVSS9.3AI score0.26335EPSS
SaveExploits1Affected Software18
F5 Networks
F5 Networks
•added 2023/02/21 6:12 p.m.•54 views

K17136: Java and JRockit vulnerabilities CVE-2015-0478 and CVE-2015-0488

Security Advisory Description CVE-2015-0478 Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect confidentiality via vectors related to JCE.Per Oracle: Applies to client and server deployment of Java. This vulnerability c...

5CVSS4.9AI score0.03629EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/02/21 6:10 p.m.•54 views

K8178: MySQL vulnerabilities CVE-2007-5925, CVE-2007-5969, and CVE-2007-6303

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...

7.1CVSS8.8AI score0.1426EPSS
SaveExploits5
F5 Networks
F5 Networks
•added 2023/02/21 6:10 p.m.•54 views

K8938: BIND DNS cache poisoning vulnerability - CVE-2008-1447 - VU#800113

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...

6.8CVSS6.6AI score0.95182EPSS
SaveExploits21
F5 Networks
F5 Networks
•added 2023/02/21 6:8 p.m.•54 views

K17181: BIND vulnerability CVE-2015-5722

Security Advisory Description Parsing a malformed DNSSEC key can cause a validating resolver to exit due to a failed assertion in buffer.c. It is possible for a remote attacker to deliberately trigger this condition, for example by using a query which requires a response from a zone containing a...

7.8CVSS6.8AI score0.33652EPSS
SaveExploits0Affected Software19
F5 Networks
F5 Networks
•added 2023/02/21 6:7 p.m.•54 views

K81557381: BIG-IP HTTP/2 vulnerability CVE-2019-6673

Security Advisory Description When the BIG-IP system is configured in HTTP/2 full proxy mode, specifically crafted requests may cause a disruption of service provided by the Traffic Management Microkernel TMM. CVE-2019-6673 Impact An attacker may be able to use a specifically crafted request to...

7.5CVSS7.5AI score0.01014EPSS
SaveExploits0Affected Software8
F5 Networks
F5 Networks
•added 2023/02/21 5:38 p.m.•54 views

K20022580: Linux kernel vulnerability CVE-2013-7446

Security Advisory Description Use-after-free vulnerability in net/unix/afunix.c in the Linux kernel before 4.3.3 allows local users to bypass intended AFUNIX socket permissions or cause a denial of service panic via crafted epollctl calls. CVE-2013-7446 Impact The local user may be able to bypass...

5.4CVSS6.3AI score0.00625EPSS
SaveExploits1Affected Software22
F5 Networks
F5 Networks
•added 2023/02/20 8:51 a.m.•54 views

K000132667: Sudo vulnerability CVE-2023-22809

Security Advisory Description In Sudo before 1.9.12p2, the sudoedit aka -e feature mishandles extra arguments passed in the user-provided environment variables SUDOEDITOR, VISUAL, and EDITOR, allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to...

7.8CVSS8.4AI score0.55367EPSS
SaveExploits20
F5 Networks
F5 Networks
•added 2023/02/17 4:26 p.m.•54 views

K000132639: ALPACA: TLS vulnerability CVE-2021-3618

Security Advisory Description ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP...

7.4CVSS7.8AI score0.02036EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2022/12/27 11:49 p.m.•54 views

K14981751: Linux kernel vulnerability CVE-2019-18808

Security Advisory Description A memory leak in the ccprunshacmd function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service memory consumption, aka CID-128c66429247. CVE-2019-18808 Impact There is no impact; F5 products are not affected...

5.5CVSS6.3AI score0.00329EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2022/12/15 6:31 p.m.•54 views

K59333944: Apache mod_proxy_ftp vulnerability CVE-2020-1934

Security Advisory Description In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server. CVE-2020-1934 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has...

5.3CVSS6.6AI score0.51951EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2016/07/26 12:0 a.m.•54 views

SOL53729441 - MySQL vulnerability CVE-2016-2047

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

5.9CVSS2.5AI score0.03741EPSS
SaveExploits0References4
F5 Networks
F5 Networks
•added 2016/07/11 12:0 a.m.•54 views

SOL92111011 - Linux kernel vulnerability CVE-2016-2117

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

7.5CVSS2.5AI score0.06386EPSS
SaveExploits0References4
F5 Networks
F5 Networks
•added 2016/07/08 12:0 a.m.•54 views

SOL24642829 - Linux kernel vulnerability CVE-2015-7515

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

4.9CVSS2.4AI score0.018EPSS
SaveExploits4References4
F5 Networks
F5 Networks
•added 2016/06/20 12:0 a.m.•54 views

SOL61275340 - Java vulnerability CVE-2013-5823

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

5CVSS1.8AI score0.04732EPSS
SaveExploits0References8
F5 Networks
F5 Networks
•added 2016/06/09 12:0 a.m.•54 views

SOL99998454 - iControl REST vulnerability CVE-2016-5021

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

4.9CVSS2AI score0.01237EPSS
SaveExploits0References5
F5 Networks
F5 Networks
•added 2016/06/08 12:0 a.m.•54 views

SOL51484039 - PHP 'snmp.c' remote format string vulnerability CVE-2016-4071

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

9.8CVSS2.6AI score0.19455EPSS
SaveExploits2References4
F5 Networks
F5 Networks
•added 2016/05/25 12:0 a.m.•54 views

SOL24613253 - NTP vulnerability CVE-2016-2516

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

7.1CVSS1.5AI score0.08948EPSS
SaveExploits0References4
F5 Networks
F5 Networks
•added 2016/05/19 12:0 a.m.•54 views

SOL36488941 - OpenSSL vulnerability CVE-2016-2106

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

7.5CVSS2.3AI score0.27261EPSS
SaveExploits1References7
F5 Networks
F5 Networks
•added 2016/03/03 12:0 a.m.•54 views

SOL65342329 - Java vulnerabilities CVE-2016-0494, CVE-2016-0448, and CVE-2016-0402

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

10CVSS2.9AI score0.07211EPSS
SaveExploits0References4
F5 Networks
F5 Networks
•added 2016/01/27 12:0 a.m.•54 views

SOL13145361 - Linux kernel KVM subsystem vulnerability CVE-2014-3647

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

5.5CVSS1.4AI score0.00588EPSS
SaveExploits0References4
F5 Networks
F5 Networks
•added 2015/11/20 12:0 a.m.•54 views

SOL14132811 - Java vulnerability CVE-2015-4893

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

5CVSS1.9AI score0.05288EPSS
SaveExploits0References5
F5 Networks
F5 Networks
•added 2015/09/15 12:0 a.m.•54 views

SOL17270 - OpenSSH vulnerability CVE-2015-6565

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL995...

7.2CVSS2.4AI score0.02667EPSS
SaveExploits4References3
F5 Networks
F5 Networks
•added 2015/09/08 12:0 a.m.•54 views

SOL17247 - PHP vulnerability CVE-2015-1351

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL995...

7.5CVSS2.5AI score0.08646EPSS
SaveExploits1References3
F5 Networks
F5 Networks
•added 2015/07/07 12:0 a.m.•54 views

SOL16920 - OpenSSL vulnerability CVE-2014-8176

The failover.secure system database variable is only available in BIG-IP 11.5.0 and later, and is disabled by default. However, Common Criteria mode enables the failover.secure database variable. The BIG-IP Edge Client system will be vulnerable only when connected to a malicious server...

7.5CVSS2.5AI score0.16587EPSS
SaveExploits1References7
Total number of security vulnerabilities5000