big-ip_global_traffic_manager Archives - CVE Vulnerability

CVE-2018-14468

Sun, 26 Feb 2023 06:46:20 +0000

The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().

The post CVE-2018-14468 appeared first on CVE Vulnerability.

CVE-2019-6643

Sun, 26 Feb 2023 06:34:01 +0000

On versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, and 11.5.2-11.6.4, an attacker sending specifically crafted DHCPv6 requests through a BIG-IP virtual server configured with a DHCPv6 profile may be able to cause the TMM process to produce a core file.

The post CVE-2019-6643 appeared first on CVE Vulnerability.

CVE-2019-6645

Sun, 26 Feb 2023 06:34:01 +0000

On BIG-IP 14.0.0-14.1.0.5, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, FTP traffic passing through a Virtual Server with both an active FTP profile associated and connection mirroring configured may lead to a TMM crash causing the configured HA action to be taken.

The post CVE-2019-6645 appeared first on CVE Vulnerability.

CVE-2019-6615

Sun, 26 Feb 2023 06:34:00 +0000

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, Administrator and Resource Administrator roles might exploit TMSH access to bypass Appliance Mode restrictions on BIG-IP systems.

The post CVE-2019-6615 appeared first on CVE Vulnerability.

CVE-2019-6638

Sun, 26 Feb 2023 06:34:00 +0000

On BIG-IP 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, Malformed http requests made to an undisclosed iControl REST endpoint can lead to infinite loop of the restjavad process.

The post CVE-2019-6638 appeared first on CVE Vulnerability.

CVE-2019-6640

Sun, 26 Feb 2023 06:34:00 +0000

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.1-11.5.8, SNMP exposes sensitive configuration objects over insecure transmission channels. This issue is exposed when a passphrase is inserted into various profile types and accessed using SNMPv2.

The post CVE-2019-6640 appeared first on CVE Vulnerability.

CVE-2019-11477

Sun, 26 Feb 2023 06:29:32 +0000

Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.

The post CVE-2019-11477 appeared first on CVE Vulnerability.

CVE-2019-11478

Sun, 26 Feb 2023 06:29:32 +0000

Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.

The post CVE-2019-11478 appeared first on CVE Vulnerability.

CVE-2022-32455

godfreyd94 — Thu, 23 Feb 2023 05:19:05 +0000

In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when a BIG-IP LTM Client SSL profile is configured on a virtual server to perform client certificate authentication with session tickets enabled, undisclosed requests cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

The post CVE-2022-32455 appeared first on CVE Vulnerability.

CVE-2022-1388

Thu, 23 Feb 2023 05:02:05 +0000

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

The post CVE-2022-1388 appeared first on CVE Vulnerability.