f5 big-ip access policy manager 13.0.0 vulnerabilities and exploits

(subscribe to this query)

In F5 BIG-IP APM 12.0.0 up to and including 12.1.2 and 13.0.0, an authenticated user with an established access session to the BIG-IP APM system may be able to cause a traffic disruption if the length of the requested URL is less than 16 characters.

F5 Big-ip Access Policy Manager 12.1.0 F5 Big-ip Access Policy Manager 12.0.0 F5 Big-ip Access Policy Manager 13.0.0 F5 Big-ip Access Policy Manager 12.1.1 F5 Big-ip Access Policy Manager 12.1.2

On BIG-IP APM 11.6.0-11.6.3.1, 12.1.0-12.1.3.3, 13.0.0, and 13.1.0-13.1.0.3, APMD may core when processing SAML Assertion or response containing certain elements.

F5 Big-ip Access Policy Manager F5 Big-ip Access Policy Manager 13.0.0

Responses to SOCKS proxy requests made through F5 BIG-IP version 13.0.0, 12.0.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5 may cause a disruption of services provided by TMM. The data plane is impacted and exposed only when a SOCKS proxy profile is attached to a Virtual Server. Th...

F5 Big-ip Local Traffic Manager F5 Big-ip Local Traffic Manager 13.0.0 F5 Big-ip Application Acceleration Manager F5 Big-ip Application Acceleration Manager 13.0.0 F5 Big-ip Advanced Firewall Manager F5 Big-ip Advanced Firewall Manager 13.0.0 F5 Big-ip Access Policy Manager 13.0.0 F5 Big-ip Access Policy Manager F5 Big-ip Application Security Manager F5 Big-ip Application Security Manager 13.0.0 F5 Big-ip Link Controller F5 Big-ip Link Controller 13.0.0 F5 Big-ip Policy Enforcement Manager F5 Big-ip Policy Enforcement Manager 13.0.0 F5 Big-ip Websafe F5 Big-ip Websafe 13.0.0

In F5 BIG-IP APM software version 13.0.0 and 12.1.2, in some circumstances, APM tunneled VPN flows can cause a VPN/PPP connflow to be prematurely freed or cause TMM to stop responding with a "flow not in use" assertion. An attacker may be able to disrupt traffic or caus...

F5 Big-ip Access Policy Manager 12.1.2 F5 Big-ip Access Policy Manager 13.0.0

In F5 BIG-IP APM software version 13.0.0 and 12.1.2, under rare conditions, the BIG-IP APM system appends log details when responding to client requests. Details in the log file can vary; customers running debug mode logging with BIG-IP APM are at highest risk.

F5 Big-ip Access Policy Manager 12.1.2 F5 Big-ip Access Policy Manager 13.0.0

Under certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles, when the Reassemble IP Fragments option is disabled (default), some specific large fragmented packets may restart the Traffic Management Microkernel (TMM).

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, race conditions in iControl REST may lead to commands being executed with different privilege levels than expected.

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, undisclosed HTTP requests may cause a denial of service.

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, a slow memory leak as a result of undisclosed IPv4 or IPv6 packets sent to BIG-IP management port or self IP addresses may lead to out of memory (OOM) conditions.

F5 Big-ip Local Traffic Manager 13.0.0 F5 Big-ip Application Acceleration Manager 13.0.0 F5 Big-ip Advanced Firewall Manager 13.0.0 F5 Big-ip Analytics 13.0.0 F5 Big-ip Access Policy Manager 13.0.0 F5 Big-ip Application Security Manager 13.0.0 F5 Big-ip Dns 13.0.0 F5 Big-ip Global Traffic Manager 13.0.0 F5 Big-ip Link Controller 13.0.0 F5 Big-ip Policy Enforcement Manager 13.0.0 F5 Big-ip Websafe 13.0.0

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, 12.1.0 - 12.1.2 and 11.5.1 - 11.6.1, an undisclosed sequence of packets, sourced from an adjacent network may cause TMM to crash.

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook