CVE-2014-0196

CVE-2014-0196 affects the Linux kernel (through 3.14.3) specifically the n_tty_write function in drivers/tty/n_tty.c. The flaw permits a local user to trigger a race condition between read and write operations with long strings in the LECHO & !OPOST case, enabling denial of service (memory corrup...

CVE-2018-14634

CVE-2018-14634 is a Linux kernel integer overflow vulnerability in create_elf_tables(). An unprivileged local user with access to a SUID (or otherwise privileged) binary could escalate privileges. Documented vulnerable kernel families include 2.6.x, 3.10.x, and 4.14.x. Mitigations/recognitions ex...

CVE-2014-5209

The CVE-2014-5209 issue affects NTP 4.2.7p25 private (mode 6/7) messages via GET_RESTRICT, enabling information disclosure of sensitive data. Impact is limited to partial confidentiality; no exploit details are provided in the sources. No patched version is listed in the initial docs; a practical...

CVE-2015-4047

The CVE-2015-4047 vulnerability affects ipsec-tools, specifically the racoon daemon's code path in racoon/gssapi.c. A remote attacker can send crafted UDP requests to trigger a NULL pointer dereference, causing the IKE daemon to crash and resulting in DoS. The issue is associated with IPsec-Tools...

CVE-2015-8099

CVE-2015-8099 affects F5 BIG-IP products (multiple modules) where software SYN cookies are configured on virtual servers. Under limited conditions, an invalid TCP segment can cause a DoS (High-Speed Bridge hang) in the data plane via virtual servers. The vulnerability impacts various BIG-IP relea...

CVE-2016-5022

CVE-2016-5022 affects F5 BIG-IP components when Packet Filtering is enabled on virtual servers/self IPs. An unauthenticated remote attacker can disrupt services by sending crafted traffic, causing the Traffic Management Microkernel (TMM) to restart and temporarily fail to process traffic. Affecte...

CVE-2017-6128

CVE-2017-6128 affects F5 BIG‑IP family (sshd DoS). The advisory lists multiple products (BIG‑IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, PSM, WebSafe, WebAccelerator, iWorkflow, BIG‑IQ components, and related management interfaces) with specific vulne...

CVE-2018-15321

CVE-2018-15321 affects BIG-IP products when Appliance mode is licensed and Admin/Resource Administrator roles have or are granted TMSH access. The issue allows high-privilege attackers to bypass Appliance mode restrictions and overwrite critical system files via TMSH, bypassing security controls....

CVE-2018-15322

The CVE-2018-15322 affects BIG-IP family with tmsh access where repeatedly saving edits via the tmsh edit cli preference command can exhaust /var partition storage, causing DoS. Affected: BIG-IP (versions 14.0.0–14.0.0.2, 13.0.0–13.1.0.7, 12.1.0–12.1.3.5, 11.6.0–11.6.3.2, 11.2.1–11.5.6); BIG-IQ C...

CVE-2015-7393

CVE-2015-7393 : The vulnerability affects the dcoep binary across multiple F5 BIG-IP products (LTM, Analytics, APM, ASM, DNS, Edge Gateway/WebAccelerator/WOM, GTM, PSM, Enterprise Manager, BIG-IQ variants) and versions listed as vulnerable (e.g., 11.2.0–11.6.0 and 12.0.0 before HF1 among others)....

CVE-2018-5516

CVE-2018-5516 affects F5 BIG-IP and related products where authenticated TMOS Shell (tmsh) access allows exfiltration of filesystem objects restricted by tmsh. Affected lines include BIG-IP versions 11.x–16.x, Enterprise Manager 3.x, BIG-IQ 4–7.x, and F5 iWorkflow 2.x. Root cause: tmsh restrictio...

CVE-2018-5540

CVE-2018-5540 affects F5 BIG-IP family where the big3d process does not irrevocably minimize group privileges at startup. The F5 advisory K82038789 lists vulnerable lines and fixed versions: BIG-IP DNS/GTM 13.x: upgrade to 13.1.0; 12.x: upgrade to 12.1.3.4; 11.x: upgrade to 11.6.3.2 (11.6.0-11.6....

CVE-2016-5021

CVE-2016-5021 affects F5 BIG-IP/iControl REST across multiple product families (e.g., BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, PEM; Big-IP DNS; GTM; BIG-IQ variants). An authenticated administrator with access to iControl REST can cause information disclosure by crafting malici...