big-ip_edge_gateway Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/big-ip_edge_gateway/ Sun, 26 Feb 2023 06:46:29 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png big-ip_edge_gateway Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/big-ip_edge_gateway/ 32 32 CVE-2018-14880 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-14880/ Sun, 26 Feb 2023 06:46:29 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-14880/ The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().

The post CVE-2018-14880 appeared first on CVE Vulnerability.

]]> The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().

The post CVE-2018-14880 appeared first on CVE Vulnerability.

]]> CVE-2020-5854 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-5854/ Sun, 26 Feb 2023 06:42:28 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-5854/ On BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.0-11.6.5.1, the tmm crashes under certain circumstances when using the connector profile if a specific sequence of connections are made.

The post CVE-2020-5854 appeared first on CVE Vulnerability.

]]> On BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.0-11.6.5.1, the tmm crashes under certain circumstances when using the connector profile if a specific sequence of connections are made.

The post CVE-2020-5854 appeared first on CVE Vulnerability.

]]> CVE-2019-6974 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6974/ Sun, 26 Feb 2023 06:34:06 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6974/ In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.

The post CVE-2019-6974 appeared first on CVE Vulnerability.

]]> In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.

The post CVE-2019-6974 appeared first on CVE Vulnerability.

]]> CVE-2019-6651 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6651/ Sun, 26 Feb 2023 06:34:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6651/ In BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.5.1-11.6.4, BIG-IQ 7.0.0, 6.0.0-6.1.0,5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, the Configuration utility login page may not follow best security practices when handling a malicious request.

The post CVE-2019-6651 appeared first on CVE Vulnerability.

]]> In BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.5.1-11.6.4, BIG-IQ 7.0.0, 6.0.0-6.1.0,5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, the Configuration utility login page may not follow best security practices when handling a malicious request.

The post CVE-2019-6651 appeared first on CVE Vulnerability.

]]> CVE-2019-6642 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6642/ Sun, 26 Feb 2023 06:34:00 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6642/ In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, authenticated users with the ability to upload files (via scp, for example) can escalate their privileges to allow root shell access from within the TMOS Shell (tmsh) interface. The tmsh interface allows users to execute a secondary […]

The post CVE-2019-6642 appeared first on CVE Vulnerability.

]]> In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, authenticated users with the ability to upload files (via scp, for example) can escalate their privileges to allow root shell access from within the TMOS Shell (tmsh) interface. The tmsh interface allows users to execute a secondary program via tools like sftp or scp.

The post CVE-2019-6642 appeared first on CVE Vulnerability.

]]> CVE-2019-11479 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11479/ Sun, 26 Feb 2023 06:29:32 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11479/ Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, […]

The post CVE-2019-11479 appeared first on CVE Vulnerability.

]]> Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commits 967c05aee439e6e5d7d805e195b3a20ef5c433d6 and 5f3e2bf008c2221478101ee72f5cb4654b9fc363.

The post CVE-2019-11479 appeared first on CVE Vulnerability.

]]>