F5 / Big-IP Protocol Security Module
61 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2013-3587 | BREACH attack against HTTP compression | MEDIUM | 5.9 | Feb 21, 2020 |
| CVE-2014-5209 | ntp: Information Disclosure vulnerability via GET_RESTRICT control message | MEDIUM | 5.3 | Jan 8, 2020 |
| CVE-2019-6608 | On BIG-IP 11.5.1-11.6.3, 12.1.0-12.1.3, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2, under certain conditions, the snmpd daemon may leak memory on a multi-blade BIG-I… | MEDIUM | 5.9 | Mar 28, 2019 |
| CVE-2019-6604 | On BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3.6, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2, under certain conditions, hardware systems with a High-Speed Bri… | MEDIUM | 6.8 | Mar 28, 2019 |
| CVE-2018-15327 | In BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1 or Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Management User I… | HIGH | 7.2 | Oct 31, 2018 |
| CVE-2018-15325 | In BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, iControl and TMSH usage by authenticated users may leak a small amount of memory when executing commands | MEDIUM | 4.3 | Oct 31, 2018 |
| CVE-2018-15323 | On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, in certain circumstances, when processing traffic through a Virtual Server with an associated MQTT profile, the T… | MEDIUM | 5.9 | Oct 31, 2018 |
| CVE-2018-15322 | On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 6.0.0-6.0.1, 5.0.0-5.4.0 or 4.6.0… | MEDIUM | 6.5 | Oct 31, 2018 |
| CVE-2018-15321 | When BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cl… | MEDIUM | 4.9 | Oct 31, 2018 |
| CVE-2018-15320 | On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, undisclosed traffic patterns may lead to denial of service conditions for the BIG-IP system. The configuration wh… | HIGH | 7.5 | Oct 31, 2018 |
| CVE-2018-15319 | On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. T… | HIGH | 7.5 | Oct 31, 2018 |
| CVE-2018-15318 | In BIG-IP 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, or 12.1.3.4-12.1.3.6, If an MPTCP connection receives an abort signal while the initial flow is not the primary f… | HIGH | 7.5 | Oct 31, 2018 |
| CVE-2018-15317 | In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an attacker sending specially crafted SSL records to a SSL Virtual Server wil… | HIGH | 7.5 | Oct 31, 2018 |
| CVE-2016-7475 | Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the Traffic Management Microkernel (TMM) may not properly clean-up pool… | HIGH | 7.5 | Oct 8, 2018 |
| CVE-2017-6155 | On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or HTTP/2 requests may result in a disruption of service to TMM.… | HIGH | 7.5 | Apr 13, 2018 |
| CVE-2014-4024 | SSL virtual servers in F5 BIG-IP systems 10.x before 10.2.4 HF9, 11.x before 11.2.1 HF12, 11.3.0 before HF10, 11.4.0 before HF8, 11.4.1 before HF5, 11.5.0 befo… | MEDIUM | 5.9 | Mar 19, 2018 |
| CVE-2017-6163 | In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, when a virtual server us… | MEDIUM | 5.9 | Oct 27, 2017 |
| CVE-2016-7469 | A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge… | MEDIUM | 5.4 | Jun 9, 2017 |
| CVE-2014-6031 | Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x before 11.4.1 HF9, 11.5.x before 11.5.… | MEDIUM | 4.9 | Jun 8, 2017 |
| CVE-2016-7476 | The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, APM, ASM, GTM, Link Controller, PEM, PSM, and WebSafe 11.6.0 before 11.6.0 HF6, 11.5.0 bef… | HIGH | 7.5 | May 11, 2017 |
| CVE-2016-9250 | In F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user with access to the control plane may be able to delete arbitrary… | HIGH | 7.5 | May 10, 2017 |
| CVE-2017-6128 | An attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in F5 BIG-IP, Enterprise Manager, BIG-IQ, and iWorkflow. | HIGH | 7.5 | May 1, 2017 |
| CVE-2016-9252 | The Traffic Management Microkernel (TMM) in F5 BIG-IP before 11.5.4 HF3, 11.6.x before 11.6.1 HF2 and 12.x before 12.1.2 does not properly handle minimum path… | HIGH | 7.5 | Mar 27, 2017 |
| CVE-2016-7474 | In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain… | MEDIUM | 5.5 | Mar 27, 2017 |
| CVE-2016-7468 | An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic. This vulnerab… | MEDIUM | 5.9 | Mar 23, 2017 |
Showing 1 to 25 of 61 CVEs