f5 big-ip domain name system 17.0.0 vulnerabilities and exploits

(subscribe to this query)

In all versions of BIG-IP, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing an undisclosed iControl REST endpoint. A successful exploit can allow the malicious user to cross a secur...

In BIG-IP Versions 17.0.x prior to 17.0.0.1, 16.1.x prior to 16.1.3.1, 15.1.x prior to 15.1.6.1, 14.1.x prior to 14.1.5.1, and all versions of 13.1.x, and BIG-IQ Centralized Management all versions of 8.x, an authenticated attacker may cause iControl SOAP to become unavailable th...

In BIG-IP Versions 17.0.x prior to 17.0.0.1, 16.1.x prior to 16.1.3.1, 15.1.x prior to 15.1.6.1, 14.1.x prior to 14.1.5.1, and all versions of 13.1.x, certain iRules commands may allow an malicious user to bypass the access control restrictions for a self IP address, regardless o...

In BIG-IP Versions 17.0.x prior to 17.0.0.1, 16.1.x prior to 16.1.3.1, 15.1.x prior to 15.1.6.1, 14.1.x prior to 14.1.5.1, and all versions of 13.1.x, when an LTM monitor or APM SSO is configured on a virtual server, and NTLM challenge-response is in use, undisclosed traffic can ...

In BIG-IP Versions 17.0.x prior to 17.0.0.1 and 16.1.x prior to 16.1.3.1, when source-port preserve-strict is configured on an HTTP Message Routing Framework (MRF) virtual server, undisclosed traffic may cause the Traffic Management Microkernel (TMM) to produce a core file and th...

In all versions, BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

In BIG-IP Versions 17.0.x prior to 17.0.0.1, 16.1.x prior to 16.1.3.1, 15.1.x prior to 15.1.6.1, 14.1.x prior to 14.1.5.1, and all versions of 13.1.x, and BIG-IQ version 8.x prior to 8.2.0 and all versions of 7.x, an authenticated user's iControl REST token may remain valid ...

When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

A format string vulnerability exists in iControl SOAP that allows an authenticated malicious user to crash the iControl SOAP CGI process or, potentially execute arbitrary code. In appliance mode BIG-IP, a successful exploit of this vulnerability can allow the malicious user to c...

F5 Big-ip Application Security Manager 13.1.0 F5 Big-ip Advanced Firewall Manager 17.0.0 F5 Big-ip Advanced Firewall Manager 13.1.5 F5 Big-ip Access Policy Manager 17.0.0 F5 Big-ip Access Policy Manager 13.1.5 F5 Big-ip Analytics 17.0.0 F5 Big-ip Analytics 13.1.5 F5 Big-ip Application Security Manager 17.0.0 F5 Big-ip Application Acceleration Manager 17.0.0 F5 Big-ip Application Acceleration Manager 13.1.5 F5 Big-ip Policy Enforcement Manager 17.0.0 F5 Big-ip Policy Enforcement Manager 13.1.5 F5 Big-ip Local Traffic Manager 17.0.0 F5 Big-ip Local Traffic Manager 13.1.5 F5 Big-ip Link Controller 17.0.0 F5 Big-ip Link Controller 13.1.5 F5 Big-ip Fraud Protection Service 17.0.0 F5 Big-ip Fraud Protection Service 13.1.5 F5 Big-ip Domain Name System 17.0.0 F5 Big-ip Ssl Orchestrator 13.1.5 F5 Big-ip Ddos Hybrid Defender 13.1.5 F5 Big-ip Application Security Manager

1 Github repository

On F5 BIG-IP 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, and 14.1.x versions before 14.1.4.6, a stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility (also referred to as the BIG-IP TMUI) that allow...

F5 Big-ip Access Policy Manager 14.1.0 F5 Big-ip Advanced Firewall Manager 14.1.0 F5 Big-ip Application Acceleration Manager 14.1.0 F5 Big-ip Link Controller 14.1.0 F5 Big-ip Policy Enforcement Manager 14.1.0 F5 Big-ip Local Traffic Manager 14.1.0 F5 Big-ip Analytics 14.1.0 F5 Big-ip Application Security Manager 14.1.0 F5 Big-ip Domain Name System 14.1.0 F5 Big-ip Global Traffic Manager 14.1.0 F5 Big-ip Access Policy Manager 14.1.4 F5 Big-ip Access Policy Manager 15.1.0 F5 Big-ip Advanced Firewall Manager 14.1.4 F5 Big-ip Advanced Firewall Manager 15.1.0 F5 Big-ip Analytics 14.1.4 F5 Big-ip Analytics 15.1.0 F5 Big-ip Application Acceleration Manager 14.1.4 F5 Big-ip Application Acceleration Manager 15.1.0 F5 Big-ip Application Security Manager 14.1.4 F5 Big-ip Application Security Manager 15.1.0 F5 Big-ip Domain Name System 14.1.4 F5 Big-ip Domain Name System 15.1.0

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook