f5 Archives - CVE Vulnerability

CVE-2008-7032

Sun, 26 Feb 2023 09:11:49 +0000

Web Management Console Cross-site request forgery (CSRF) vulnerability in the web management console in F5 BIG-IP 9.4.3 allows remote attackers to hijack the authentication of administrators for requests that create new administrators and execute shell commands, as demonstrated using tmui/Control/form.

The post CVE-2008-7032 appeared first on CVE Vulnerability.

CVE-2008-0539

Sun, 26 Feb 2023 09:08:35 +0000

Cross-site scripting (XSS) vulnerability in dms/policy/rep_request.php in F5 BIG-IP Application Security Manager (ASM) 9.4.3 allows remote attackers to inject arbitrary web script or HTML via the report_type parameter.

The post CVE-2008-0539 appeared first on CVE Vulnerability.

CVE-2007-6258

Sun, 26 Feb 2023 09:08:05 +0000

Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary code via a long (1) Host header, or (2) Hostname within a Host header.

The post CVE-2007-6258 appeared first on CVE Vulnerability.

CVE-2018-14880

Sun, 26 Feb 2023 06:46:29 +0000

The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().

The post CVE-2018-14880 appeared first on CVE Vulnerability.

CVE-2018-14468

Sun, 26 Feb 2023 06:46:20 +0000

The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().

The post CVE-2018-14468 appeared first on CVE Vulnerability.

CVE-2020-5854

Sun, 26 Feb 2023 06:42:28 +0000

On BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.0-11.6.5.1, the tmm crashes under certain circumstances when using the connector profile if a specific sequence of connections are made.

The post CVE-2020-5854 appeared first on CVE Vulnerability.

CVE-2020-5851

Sun, 26 Feb 2023 06:42:28 +0000

On impacted versions and platforms the Trusted Platform Module (TPM) system integrity check cannot detect modifications to specific system components. This issue only impacts specific engineering hotfixes and platforms. NOTE: This vulnerability does not affect any of the BIG-IP major, minor or maintenance releases you obtained from downloads.f5.com. The affected Engineering Hotfix builds are as follows: Hotfix-BIGIP-14.1.0.2.0.45.4-ENG Hotfix-BIGIP-14.1.0.2.0.62.4-ENG

The post CVE-2020-5851 appeared first on CVE Vulnerability.

CVE-2019-6974

Sun, 26 Feb 2023 06:34:06 +0000

In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.

The post CVE-2019-6974 appeared first on CVE Vulnerability.

CVE-2019-6651

Sun, 26 Feb 2023 06:34:01 +0000

In BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.5.1-11.6.4, BIG-IQ 7.0.0, 6.0.0-6.1.0,5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, the Configuration utility login page may not follow best security practices when handling a malicious request.

The post CVE-2019-6651 appeared first on CVE Vulnerability.

CVE-2019-6643

Sun, 26 Feb 2023 06:34:01 +0000

On versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, and 11.5.2-11.6.4, an attacker sending specifically crafted DHCPv6 requests through a BIG-IP virtual server configured with a DHCPv6 profile may be able to cause the TMM process to produce a core file.

The post CVE-2019-6643 appeared first on CVE Vulnerability.