Lucene search
+L

6517 matches found

F5 Networks
F5 Networks
•added 2016/09/27 12:0 a.m.•43 views

SOL57255643 - libssh vulnerability CVE-2016-0739

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

5.9CVSS2.8AI score0.02431EPSS
SaveExploits0References7
F5 Networks
F5 Networks
•added 2016/08/18 12:0 a.m.•43 views

SOL01409145 - Oracle MySQL vulnerability CVE-2016-0641

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

5.1CVSS1.4AI score0.0139EPSS
SaveExploits0References5
F5 Networks
F5 Networks
•added 2016/08/04 12:0 a.m.•43 views

SOL82205554 - Multiple MySQL vulnerabilities

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

5.5CVSS2.4AI score0.01002EPSS
SaveExploits0References4
F5 Networks
F5 Networks
•added 2016/06/15 12:0 a.m.•43 views

SOL23453330 - NTP vulnerability CVE-2016-4957

Vulnerability Recommended Actions None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5...

7.5CVSS2.4AI score0.44936EPSS
SaveExploits2References4
F5 Networks
F5 Networks
•added 2016/04/29 12:0 a.m.•43 views

SOL57500018 - ISC DHCP 4.x vulnerability CVE-2015-8605

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

6.5CVSS2.1AI score0.7645EPSS
SaveExploits0References8
F5 Networks
F5 Networks
•added 2015/10/26 12:0 a.m.•43 views

SOL17475 - Linux kernel vulnerability CVE-2015-5707

Recommended Action If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are currently...

4.6CVSS1AI score0.00493EPSS
SaveExploits0References5
F5 Networks
F5 Networks
•added 2015/09/09 12:0 a.m.•43 views

SOL17248 - OpenSSL vulnerability CVE-2010-0742

Note: As of February 17, 2015, AskF5 Security Advisory articles include the Severity value. Security Advisory articles published before this date do not list a Severity value. Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can...

7.5CVSS0.9AI score0.07834EPSS
SaveExploits2References4
F5 Networks
F5 Networks
•added 2015/04/14 12:0 a.m.•43 views

SOL16435 - GNU C Library vulnerability CVE-2014-6040

Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not list any version...

5CVSS0.7AI score0.06564EPSS
SaveExploits1References12
F5 Networks
F5 Networks
•added 2014/11/27 12:0 a.m.•43 views

SOL15885 - GNU C Library vulnerability CVE-2011-1071

Most ARX components are based on GNU C library code. Recommended Action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are current...

10CVSS1.3AI score0.14323EPSS
SaveExploits5References4
F5 Networks
F5 Networks
•added 2014/11/25 12:0 a.m.•43 views

SOL15867 - Perl vulnerabilities CVE-2012-5195, CVE-2012-5526, CVE-2012-6329, and CVE-2013-1667

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

7.5CVSS1.5AI score0.62202EPSS
SaveExploits15References4
F5 Networks
F5 Networks
•added 2014/10/23 12:0 a.m.•43 views

SOL15743 - BIND vulnerability CVE-2011-2465

Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...

2.6CVSS2.6AI score0.0888EPSS
SaveExploits1References4
F5 Networks
F5 Networks
•added 2014/09/04 12:0 a.m.•43 views

SOL15565 - OpenSSL vulnerability CVE-2014-3512

Recommended action If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the table does not list any version in the column, then no upgrade candidate currently exists. To mitigate this...

7.5CVSS1.7AI score0.7408EPSS
SaveExploits0References5
F5 Networks
F5 Networks
•added 2014/09/04 12:0 a.m.•43 views

SOL15547 - MIT Kerberos 5 vulnerability CVE-2014-4342

Vulnerability Recommended Actions BIG-IP If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table doe...

5CVSS1.2AI score0.06523EPSS
SaveExploits0References3
F5 Networks
F5 Networks
•added 2014/05/29 12:0 a.m.•43 views

SOL15296 - list.jsp XSS vulnerability CVE-2014-3959

A cross-site scripting XSS vulnerability exists in list.jsp for the BIG-IP and Enterprise Manager Configuration utilities. CVE-2014-3959...

4.3CVSS5.4AI score0.01546EPSS
SaveExploits0References5
F5 Networks
F5 Networks
•added 2014/04/17 12:0 a.m.•43 views

SOL15158 - OpenSSL vulnerability CVE-2013-6450

Vulnerability Recommended Actions If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not...

5.8CVSS2AI score0.14542EPSS
SaveExploits1References8
F5 Networks
F5 Networks
•added 2014/04/10 12:0 a.m.•43 views

SOL15155 - OpenSSH vulnerability CVE-2007-3102

Recommended action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...

4.3CVSS2.5AI score0.02342EPSS
SaveExploits0References4
F5 Networks
F5 Networks
•added 2014/02/25 12:0 a.m.•43 views

SOL15013 - OpenSSH vulnerability CVE-2011-0539

Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents. SOL4602: Overview of the F5 security vulnerability response policy...

5CVSS3.7AI score0.01812EPSS
SaveExploits0References3
F5 Networks
F5 Networks
•added 2013/06/26 12:0 a.m.•43 views

SOL14468 - Client-side component flaw CVE-2013-0150

Vulnerability Recommended Actions To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column in the previous table. A fixed client component will automatically be downloaded the next time a client is authenticated to the APM or FirePass...

9.3CVSS1.4AI score0.06316EPSS
SaveExploits0References11
F5 Networks
F5 Networks
•added 2013/05/30 12:0 a.m.•43 views

SOL14432 - PHP SOAP wdsl cache file vulnerability CVE-2013-1635

Vulnerability Recommended Actions None Supplemental Information CVE-2013-1635 Note: The previous link takes you to a resource outside of AskF5, and it is possible that the information may be removed without our knowledge. SOL9970: Subscribing to email notifications regarding F5 products SOL9957:...

7.5CVSS7.2AI score0.09747EPSS
SaveExploits0References4
F5 Networks
F5 Networks
•added 2013/01/23 12:0 a.m.•43 views

SOL14154 - SQL injection vulnerability from an authenticated source CVE-2012-3000

Vulnerability Recommended Actions To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column. Acknowledgements F5 would like to acknowledge SEC Consult Vulnerability Lab for bringing this issue to our attention, and for following the...

7.5CVSS2.7AI score0.0159EPSS
SaveExploits2References6
F5 Networks
F5 Networks
•added 2011/05/12 12:0 a.m.•43 views

SOL12852 - BIND vulnerability CVE-2010-3615

For information about this advisory, refer to the Common Vulnerabilities and Exposures website at the following location: Note: The following link will take you to a resource outside of AskF5, and it is possible that the document may be removed without our knowledge:...

5CVSS8.8AI score0.09786EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2009/08/19 12:0 a.m.•43 views

SOL10417 - BIG-IP ASM and PSM remote buffer overflow exploit

F5 Product Development tracked this issue as CR126690 and it was fixed in BIG-IP ASM and PSM 9.4.8 and 10.1.0. For information about upgrading, refer to the BIG-IP ASM or PSM release notes. Important: This issue was re-introduced in 9.4.8 HF-1, and then fixed in 9.4.8 HF-2 and later as CR133530...

2.7AI score
SaveExploits0Affected Software15
F5 Networks
F5 Networks
•added 2008/06/30 12:0 a.m.•43 views

SOL8918 - Linux kernel vulnerability CVE-2007-3851

A flaw in the DRM driver for Intel graphics cards allows a local user to access any part of the main memory. To access the DRM functionality a user must have access to the X server, which is granted through the graphical login. This also only affects systems with an Intel 965 or later graphic...

6CVSS5.6AI score0.00313EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2007/05/16 12:0 a.m.•43 views

SOL4232 - BIND version 8.4.4 and 8.4.5 vulnerability - CAN-2005-0033

A buffer overflow in the code for recursion and glue fetching in BIND 8.4.4 and 8.4.5 allows remote attackers to cause a denial of service. Information about this advisory is available at the following location: Note: This link takes you to a resource outside of AskF5, and it is possible that the...

5CVSS4.2AI score0.11448EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2006/08/16 12:0 a.m.•43 views

SOL5794 - Security Advisory: Perl integer sign error in format string processing - CVE-2005-3962

Although F5 Networks products contain versions of Perl that are subject to this vulnerability, this vulnerability can only be exploited by an attacker that has root access. As a result, F5 Networks products are not considered vulnerable. Integer overflow in the format string functionality...

4.6CVSS9.8AI score0.01374EPSS
SaveExploits2
F5 Networks
F5 Networks
•added 2005/06/14 12:0 a.m.•43 views

SOL4256 - RADIUS integer overflow vulnerability CAN-2005-0108

Was this resource helpful in solving your issue? Yes - this resource was helpful No - this resource was not helpful I don‘t know yet NOTE: Please do not provide personal information. Incorrect answer. Please try again: Please enter the words to the right: Please enter the numbers you hear:...

5CVSS2AI score0.03446EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2024/11/22 7:58 p.m.•42 views

K000148691: qt vulnerabilities CVE-2022-25634 and CVE-2020-0570

Security Advisory Description CVE-2022-25634 Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory. CVE-2020-0570 Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable...

7.5CVSS6.9AI score0.0196EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2024/09/30 2:51 p.m.•42 views

K000141270: PHP vulnerabilities CVE-2016-7411, CVE-2016-9138, CVE-2016-9137, CVE-2016-4541, and CVE-2016-4540

Security Advisory Description CVE-2016-7411 ext/standard/varunserializer.re in PHP before 5.6.26 mishandles object-deserialization failures, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via an unserialize call that referenc...

9.8CVSS9.1AI score0.06229EPSS
SaveExploits4
F5 Networks
F5 Networks
•added 2024/08/27 9:57 p.m.•42 views

K000140865: Linux kernel vulnerability CVE-2023-45871

Security Advisory Description An issue was discovered in drivers/net/ethernet/intel/igb/igbmain.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU. CVE-2023-45871 Impact An attacker can exploit the vulnerability to access...

7.5CVSS7.1AI score0.00544EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2024/07/25 1:29 a.m.•42 views

K000140297: Speculative race condition vulnerability CVE-2024-26602

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: sched/membarrier: reduce the ability to hammer on sysmembarrier On some systems, sysmembarrier can be very expensive, causing overall slowdowns for everything. So put a lock on the path in order to...

5.5CVSS5.5AI score0.00316EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2024/07/23 10:1 p.m.•42 views

K000140414: Loop DOS UDP vulnerability CVE-2024-2169

Security Advisory Description Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service DOS and/or abuse of resources. CVE-2024-2169 Impact The...

7.5CVSS6.7AI score0.05397EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2024/06/18 5:51 p.m.•42 views

K000140039: Intel QAT vulnerability CVE-2023-32641

Security Advisory Description Improper input validation in firmware for IntelR QAT before version QAT20.L.1.0.40-00004 may allow escalation of privilege and denial of service via adjacent access. CVE-2023-32641 Impact There is no impact; F5 products are not affected by this vulnerability. Securit...

8.8CVSS8.5AI score0.0031EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2024/06/06 1:49 a.m.•42 views

K000139922: Open vSwitch vulnerabilities CVE-2023-3966 and CVE-2023-5366

Security Advisory Description CVE-2023-3966 A flaw was found in Open vSwitch where multiple versions are vulnerable to crafted Geneve packets, which may result in a denial of service and invalid memory accesses. Triggering this issue requires that hardware offloading via the netlink path is...

7.5CVSS6.3AI score0.01033EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2024/05/10 1:38 p.m.•42 views

K000139580: MySQL Server vulnerability CVE-2024-20998

Security Advisory Description Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

4.9CVSS5.1AI score0.0097EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2024/05/08 12:52 p.m.•42 views

K000138728: BIG-IP IPsec vulnerability CVE-2024-33608

Security Advisory Description When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. CVE-2024-33608 Impact Traffic is disrupted while the TMM process restarts. This vulnerability allows a remote unauthenticated attacker to...

7.5CVSS6.9AI score0.00593EPSS
SaveExploits0Affected Software12
F5 Networks
F5 Networks
•added 2024/03/26 6:29 p.m.•42 views

K000139043: Apache Struts vulnerabilities CVE-2016-4430, CVE-2016-4431, and CVE-2016-4433

Security Advisory Description CVE-2016-4430 Apache Struts 2 2.3.20 through 2.3.28.1 mishandles token validation, which allows remote attackers to conduct cross-site request forgery CSRF attacks via unspecified vectors. CVE-2016-4431 Apache Struts 2 2.3.20 through 2.3.28.1 allows remote attackers ...

8.8CVSS7.6AI score0.09677EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2024/03/21 5:44 p.m.•42 views

K000138977: ncurses vulnerability CVE-2022-29458

Security Advisory Description ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convertstrings in tinfo/readentry.c in the terminfo library. CVE-2022-29458 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Stat...

7.1CVSS6.5AI score0.01341EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2024/03/06 10:56 p.m.•42 views

K000138851: OpenJDK vulnerabilities CVE-2024-20921, CVE-2024-20926, and CVE-2024-20932

Security Advisory Description CVE-2024-20921 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle...

7.5CVSS5.8AI score0.01026EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2024/02/27 7:14 p.m.•42 views

K000138731: Linux vulnerability CVE-2023-3776

Security Advisory Description A use-after-free vulnerability in the Linux kernel's net/sched: clsfw component can be exploited to achieve local privilege escalation. If tcfchangeindev fails, fwsetparms will immediately return an error after incrementing or decrementing the reference counter in...

7.8CVSS6.9AI score0.00508EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/12/01 11:43 p.m.•42 views

K000137761: Apache ActiveMQ vulnerability CVE-2023-46604

Security Advisory Description The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in...

10CVSS8.3AI score0.99654EPSS
SaveExploits31
F5 Networks
F5 Networks
•added 2023/10/10 10:37 a.m.•42 views

K000133467: BIG-IP HTTP/2 vulnerability CVE-2023-40534

Security Advisory Description Undisclosed requests can cause the Traffic Management Microkernel TMM to terminate when a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server and an iRule using the HTTPREQUEST event or Local Traffic Policy are associated with t...

7.5CVSS7.8AI score0.00538EPSS
SaveExploits0Affected Software13
F5 Networks
F5 Networks
•added 2023/10/09 4:59 p.m.•42 views

K000137188: AMD CPU vulnerability CVE-2021-26401

Security Advisory Description LFENCE/JMP mitigation V2-2 may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs. CVE-2021-26401 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status F5 Product Development has evaluated the currently supporte...

5.6CVSS7.1AI score0.00293EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/05/24 9:20 p.m.•42 views

K000134768: Linux kernel vulnerability CVE-2022-4378

Security Advisory Description A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system. CVE-2022-4378 Impact A locally...

7.8CVSS7.1AI score0.00431EPSS
SaveExploits0Affected Software1
F5 Networks
F5 Networks
•added 2023/05/23 4:29 p.m.•42 views

K000134748: Kubernetes vulnerabilities CVE-2019-1002100, CVE-2019-11254, CVE-2017-1002101, and CVE-2017-1002102

Security Advisory Description CVE-2019-1002100 In all Kubernetes versions prior to v1.11.8, v1.12.6, and v1.13.4, users that are authorized to make patch requests to the Kubernetes API Server can send a specially crafted patch of type "json-patch" e.g. kubectl patch --type json or "Content-Type:...

9.6CVSS6.8AI score0.11505EPSS
SaveExploits2
F5 Networks
F5 Networks
•added 2023/05/22 4:54 p.m.•42 views

K000134725: vm2 vulnerability CVE-2023-29017

Security Advisory Description vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Prior to version 3.9.15, vm2 was not properly handling host objects passed to Error.prepareStackTrace in case of unhandled async errors. A threat actor could bypass the sandbox...

10CVSS9.4AI score0.63186EPSS
SaveExploits2
F5 Networks
F5 Networks
•added 2023/05/08 7:57 a.m.•42 views

K000134500: Spring Framework vulnerability CVE-2023-20860

Security Advisory Description Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass...

7.5CVSS6.7AI score0.03514EPSS
SaveExploits1
F5 Networks
F5 Networks
•added 2023/02/21 8:2 p.m.•42 views

K44340019: rpcbind use-after-free vulnerability CVE-2015-7236

Security Advisory Description Use-after-free vulnerability in xprtsetcaller in rpcbsvccom.c in rpcbind 0.2.1 and earlier allows remote attackers to cause a denial of service daemon crash via crafted packets, involving a PMAPCALLIT code.CVE-2015-7236 Impact There is no impact; F5 products are not...

7.5CVSS7.5AI score0.06408EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 8:2 p.m.•42 views

K22843911: F5 Path MTU Discovery vulnerability CVE-2015-7759

Security Advisory Description BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the TCP profile for a virtual server is configured with Congestion Metrics Cache enabled, allow remote attackers to cause a denial of service Traffic Management Microkernel TM...

4.3CVSS4.9AI score0.01516EPSS
SaveExploits0Affected Software8
F5 Networks
F5 Networks
•added 2023/02/21 8:2 p.m.•42 views

K66871452: PowerDNS vulnerability CVE-2015-5311

Security Advisory Description PowerDNS aka pdns Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service assertion failure and server crash via crafted query packets. CVE-2015-5311 Impact There is no impact; F5 products are not affected by this vulnerability...

5CVSS6.5AI score0.67456EPSS
SaveExploits0
F5 Networks
F5 Networks
•added 2023/02/21 8:2 p.m.•42 views

K14051233: Linux kernel vulnerability CVE-2017-13715

Security Advisory Description The skbflowdissect function in net/core/flowdissector.c in the Linux kernel before 4.3 does not ensure that nproto, ipproto, and thoff are initialized, which allows remote attackers to cause a denial of service system crash or possibly execute arbitrary code via a...

10CVSS7.5AI score0.09652EPSS
SaveExploits0
Total number of security vulnerabilities5000