Browse CVEs

HIGH 7.5 CVE-2018-17539 The BGP daemon (bgpd) in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of ser… Big Ip Local Traffic Manager after 13.1.1 Fix from $1,9502018-12-28 MEDIUM 5.9 CVE-2018-15335 When APM 13.0.0-13.1.x is deployed as an OAuth Resource Server, APM becomes a client application to an external OAuth authorization server. In certai… Big Ip Access Policy Manager after 13.1.1 Fix from $1,6002018-12-28 MEDIUM 5.5 CVE-2018-15333 On versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's user with any role, including Guest Role, to have access an… Big Ip Local Traffic Manager after 14.1.0 Fix from $1,6002018-12-28 HIGH 7.8 CVE-2018-15331 On BIG-IP AAM 13.0.0 or 12.1.0-12.1.3.7, the dcdb_convert utility used by BIG-IP AAM fails to drop group permissions when executing helper scripts, w… Big Ip Application Acceleration Manager after 12.1.3 Fix from $1,9502018-12-20 HIGH 7.5 CVE-2018-15330 On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, when a virtual server using the inflate functionality to process a gzip bomb as a pay… Big Ip Local Traffic Manager after 14.0.0.2 Fix from $1,9502018-12-20 HIGH 7.2 CVE-2018-15329 On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, or Enterprise Manager 3.1.1, when authenticated administrative users run commands in … Big Ip Local Traffic Manager after 14.0.0.2 Fix from $1,9502018-12-20 HIGH 7.5 CVE-2018-15328 On BIG-IP 14.0.x, 13.x, 12.x, and 11.x, Enterprise Manager 3.1.1, BIG-IQ 6.x, 5.x, and 4.x, and iWorkflow 2.x, the passphrases for SNMPv3 users and t… Big Ip Access Policy Manager after 13.1.1 Fix from $1,9502018-12-12 MEDIUM 5.5 CVE-2018-20002 The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, h… Traffix Signaling Delivery Controller after 5.1.0 Fix from $1,6002018-12-10 HIGH 7.0 CVE-2018-15332 The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivilege… Big Ip Access Policy Manager after 13.1.1 Fix from $1,9502018-12-06 HIGH 7.5 CVE-2018-16843EPSS 47% nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This iss… Nginx 1.14.1 / 1.15.6+ Fix from $1,9502018-11-07 HIGH 7.5 CVE-2018-16844EPSS 12% nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage. This issue affect… Nginx 1.14.1 / 1.15.6+ Fix from $1,9502018-11-07 MEDIUM 6.1 CVE-2018-16845EPSS 10% nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker… Nginx 13.0+ Fix from $1,6002018-11-07 HIGH 7.5 CVE-2018-15317 In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an attacker sending specially crafted SSL records to a SSL Virtual … Big Ip Local Traffic Manager after 14.0.0.2 Fix from $1,9502018-10-31 HIGH 7.5 CVE-2018-15318 In BIG-IP 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, or 12.1.3.4-12.1.3.6, If an MPTCP connection receives an abort signal while the initial flow is not the… Big Ip Local Traffic Manager after 14.0.0.2 Fix from $1,9502018-10-31 HIGH 7.5 CVE-2018-15319 On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP profile can cause the TMM to … Big Ip Local Traffic Manager after 14.0.0.2 Fix from $1,9502018-10-31 HIGH 7.5 CVE-2018-15320 On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, undisclosed traffic patterns may lead to denial of service conditions for the BIG-IP system. The config… Big Ip Local Traffic Manager after 14.0.0.2 Fix from $1,9502018-10-31 HIGH 7.5 CVE-2018-15326 In some situations on BIG-IP APM 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.2, the CRLDP Auth access policy agent may treat … Big Ip Access Policy Manager after 14.0.0.2 Fix from $1,9502018-10-31 HIGH 7.2 CVE-2018-15327 In BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1 or Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Managem… Big Ip Local Traffic Manager after 14.0.0.2 Fix from $1,9502018-10-31 MEDIUM 6.5 CVE-2018-15322 On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 6.0.0-6.0.1, 5.0.0-5.4.… Big Ip Local Traffic Manager after 14.0.0.2 Fix from $1,6002018-10-31 MEDIUM 5.9 CVE-2018-15323 On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, in certain circumstances, when processing traffic through a Virtual Server with an associated MQTT prof… Big Ip Local Traffic Manager after 14.0.0.2 Fix from $1,6002018-10-31 MEDIUM 5.9 CVE-2018-15324 On BIG-IP APM 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, TMM may restart when processing a specially crafted request with APM portal access. Big Ip Access Policy Manager after 14.0.0.2 Fix from $1,6002018-10-31 MEDIUM 6.1 CVE-2018-15312 On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, a reflected Cross-Site Scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Co… Big Ip Application Acceleration Manager after 13.1.1.1 Fix from $1,6002018-10-19 MEDIUM 6.1 CVE-2018-15313 On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page. Big Ip Advanced Firewall Manager after 13.1.1.1 Fix from $1,6002018-10-19 MEDIUM 6.1 CVE-2018-15314 On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page. Big Ip Advanced Firewall Manager after 13.1.1.1 Fix from $1,6002018-10-19 MEDIUM 6.1 CVE-2018-15315 On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a reflected Cross Site Scripting (XSS) vulnerability in an undisclosed Configuration Utili… Big Ip Application Acceleration Manager after 13.1.1.1 Fix from $1,6002018-10-19 MEDIUM 5.5 CVE-2018-15316 In F5 BIG-IP APM 13.0.0-13.1.1.1, APM Client 7.1.5-7.1.6, and/or Edge Client 7101-7160, the BIG-IP APM Edge Client component loads the policy library… Big Ip Access Policy Manager after 7160 Fix from $1,6002018-10-19 MEDIUM 5.9 CVE-2018-15311 When F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing specially crafted TCP traffic with the Large Receive… Big Ip Local Traffic Manager after 13.1.0.5 Fix from $1,6002018-10-10 HIGH 7.5 CVE-2016-7475 Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the Traffic Management Microkernel (TMM) may not properly clea… Big Ip Access Policy Manager after 12.1.0 Fix from $1,9502018-10-08 HIGH 8.8 CVE-2018-5545 On F5 WebSafe Alert Server 1.0.0-4.2.6, a malicious, authenticated user can execute code on the alert server by using a maliciously crafted payload. Websafe Alert Server after 4.2.6 Fix from $1,9502018-09-13 HIGH 7.5 CVE-2018-5549 On BIG-IP APM 11.6.0-11.6.3.1, 12.1.0-12.1.3.3, 13.0.0, and 13.1.0-13.1.0.3, APMD may core when processing SAML Assertion or response containing cert… Big Ip Access Policy Manager after 13.1.0.3 Fix from $1,9502018-09-13