CVE-2015-4047

The CVE-2015-4047 vulnerability affects ipsec-tools, specifically the racoon daemon's code path in racoon/gssapi.c. A remote attacker can send crafted UDP requests to trigger a NULL pointer dereference, causing the IKE daemon to crash and resulting in DoS. The issue is associated with IPsec-Tools...

CVE-2009-4420

The CVE-2009-4420 issue describes a buffer overflow in the bd daemon of F5 Networks BIG-IP Application Security Manager (ASM) and Protocol Security Manager (PSM). Affected are ASM versions 9.4.4–9.4.7 and 10.0.0–10.0.1, and PSM versions 9.4.5–9.4.7 and 10.0.0–10.0.1. The underlying cause is a buf...

CVE-2019-6608

CVE-2019-6608 affects BIG-IP SNMPD on multiple versions (11.5.1–11.6.3, 12.1.0–12.1.3, 13.0.0–13.1.1.1, 14.0.0–14.0.0.2) where processing authorized SNMP requests may leak memory in multi‑blade BIG-IP vCMP guests. The vulnerability manifests as progressive memory growth in the snmpd process, pote...

CVE-2019-6604

CVE-2019-6604 affects BIG-IP systems with High-Speed Bridge (HSB) under non-default Layer 2 forwarding configurations. A VLAN group configuration combined with vlangroup.flow.allocate being disabled can cause the HSB to lock up, eventually stopping traffic processing and triggering a failover in ...

CVE-2019-6606

BIG-IP snmpd vulnerability CVE-2019-6606: processing certain SNMP requests with a request-id of 0 may leak memory. Affected versions include BIG-IP 11.5.1–11.6.3, 12.1.0–12.1.3, 13.0.0–13.1.1, and 14.0.0–14.0.0.2. Root cause is a memory leak in snmpd when handling specific SNMP requests. Impact i...

CVE-2019-6603

The CVE-2019-6603 issue affects F5 BIG-IP products as described in the primary vulnerability entry and is corroborated by F5’s advisory. Affected versions: BIG-IP 11.5.1–11.5.8, 11.6.1–11.6.3, 12.1.0–12.1.3, and 13.0.0–13.0.1 are vulnerable to malformed TCP packets sent to a self IP address or a ...

CVE-2019-6605

CVE-2019-6605 — F5 BIG-IP SSL vulnerability : Affects BIG-IP versions 11.5.1–11.5.8, 11.6.1–11.6.3, and 12.0.x. An undisclosed sequence of packets sent to an SSL virtual server (processed by a Client SSL or Server SSL profile) may cause a denial of service. Root cause details are not provided in ...