Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

f5 big-ip local traffic manager 15.0.0 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2019-6664
On BIG-IP 15.0.0 and 14.1.0-14.1.0.6, under certain conditions, network protections on the management port do not follow current best practices.
F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 15.0.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 15.0.0F5 Big-ip AnalyticsF5 Big-ip Analytics 15.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 15.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 15.0.0F5 Big-ip Domain Name SystemF5 Big-ip Domain Name System 15.0.0F5 Big-ip Edge GatewayF5 Big-ip Edge Gateway 15.0.0F5 Big-ip Fraud Protection ServiceF5 Big-ip Fraud Protection Service 15.0.0F5 Big-ip Global Traffic ManagerF5 Big-ip Global Traffic Manager 15.0.0F5 Big-ip Link ControllerF5 Big-ip Link Controller 15.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 15.0.0
5.3
CVSSv3
CVE-2019-6651
In BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.5.1-11.6.4, BIG-IQ 7.0.0, 6.0.0-6.1.0,5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, the Configuration utility login page may not follow best security practices when handling a m...
F5 Big-ip Local Traffic Manager 15.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Advanced Firewall Manager 15.0.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip Application Acceleration Manager 15.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Analytics 15.0.0F5 Big-ip AnalyticsF5 Big-ip Access Policy Manager 15.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Application Security Manager 15.0.0F5 Big-ip Application Security ManagerF5 Big-ip Edge Gateway 15.0.0F5 Big-ip Edge GatewayF5 Big-ip Fraud Protection Service 15.0.0F5 Big-ip Fraud Protection ServiceF5 Big-ip Global Traffic Manager 15.0.0F5 Big-ip Global Traffic ManagerF5 Big-ip Link Controller 15.0.0F5 Big-ip Link ControllerF5 Big-ip Policy Enforcement Manager 15.0.0F5 Big-ip Policy Enforcement Manager
7.5
CVSSv3
CVE-2018-5743
By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit...
F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 15.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 15.0.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 15.0.0F5 Big-ip AnalyticsF5 Big-ip Analytics 15.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 15.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 15.0.0F5 Big-ip Edge GatewayF5 Big-ip Edge Gateway 15.0.0F5 Big-ip Fraud Protection ServiceF5 Big-ip Fraud Protection Service 15.0.0F5 Big-ip Global Traffic ManagerF5 Big-ip Global Traffic Manager 15.0.0F5 Big-ip Link ControllerF5 Big-ip Link Controller 15.0.0F5 Big-ip WebacceleratorF5 Big-ip Webaccelerator 15.0.0
8.8
CVSSv3
CVE-2019-6642
In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, authenticated users with the ability to upload files (via scp, for example) can escalate their privileges to ...
F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 15.0.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 15.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 15.0.0F5 Big-ip Link ControllerF5 Big-ip Link Controller 15.0.0F5 Big-ip Policy Enforcement ManagerF5 Big-ip Policy Enforcement Manager 15.0.0F5 Big-ip WebacceleratorF5 Big-ip Webaccelerator 15.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 15.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 15.0.0F5 Big-ip Fraud Protection ServiceF5 Big-ip Fraud Protection Service 15.0.0F5 Big-ip Global Traffic ManagerF5 Big-ip Global Traffic Manager 15.0.0F5 Big-ip AnalyticsF5 Big-ip Analytics 15.0.0
9.1
CVSSv3
CVE-2019-6649
F5 BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 and Enterprise Manager 3.1.1 may expose sensitive information and allow the system configuration to be modified when using non-default ConfigSync settings.
F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 14.0.0F5 Big-ip Application Security Manager 15.0.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 14.0.0F5 Big-ip Local Traffic Manager 14.1.0F5 Big-ip Local Traffic Manager 15.0.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 14.0.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Advanced Firewall Manager 15.0.0F5 Big-ip AnalyticsF5 Big-ip Analytics 14.0.0F5 Big-ip Analytics 14.1.0F5 Big-ip Analytics 15.0.0F5 Big-ip Access Policy Manager 14.0.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Access Policy Manager 15.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Domain Name SystemF5 Big-ip Domain Name System 14.0.0
7.8
CVSSv3
CVE-2019-9075
An issue exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap in archive64.c.
Gnu Binutils 2.32Netapp Hci Management Node -Netapp Solidfire -Canonical Ubuntu Linux 18.04F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Access Policy Manager 15.0.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Advanced Firewall Manager 15.0.0F5 Big-ip Analytics 14.1.0F5 Big-ip Analytics 15.0.0F5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Application Acceleration Manager 15.0.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Application Security Manager 15.0.0F5 Big-ip Domain Name System 14.1.0F5 Big-ip Domain Name System 15.0.0F5 Big-ip Edge Gateway 14.1.0F5 Big-ip Edge Gateway 15.0.0F5 Big-ip Fraud Protection Service 14.1.0F5 Big-ip Fraud Protection Service 15.0.0F5 Big-ip Global Traffic Manager 14.1.0F5 Big-ip Global Traffic Manager 15.0.0
5.3
CVSSv3
CVE-2014-5209
An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.
Ntp Ntp 4.2.7F5 Big-ip Local Traffic Manager 11.2.1F5 Big-ip Wan Optimization Manager 11.2.1F5 Big-ip Edge Gateway 11.2.1F5 Big-ip Analytics 11.2.1F5 Big-ip Access Policy Manager 11.2.1F5 Big-ip Global Traffic Manager 11.2.1F5 Big-iq Centralized Management 4.6.0F5 Big-ip Webaccelerator 11.2.1F5 Big-ip Link Controller 11.2.1F5 Enterprise Manager 3.1.1F5 Big-iq Adc 4.5.0F5 Big-iq Cloud And Orchestration 1.0.0F5 Big-ip Application Security Manager 11.2.1F5 Big-iq Centralized ManagementF5 Big-ip Local Traffic ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip AnalyticsF5 Big-ip Access Policy ManagerF5 Big-ip Application Security ManagerF5 Big-ip Domain Name System
5.9
CVSSv3
CVE-2019-6471
A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development...
F5 Big-ip Local Traffic Manager 14.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 15.0.0F5 Big-ip Local Traffic Manager 14.1.0F5 Big-ip Application Acceleration Manager 14.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 15.0.0F5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Advanced Firewall Manager 14.0.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 15.0.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Analytics 14.0.0F5 Big-ip AnalyticsF5 Big-ip Analytics 15.0.0F5 Big-ip Analytics 14.1.0F5 Big-ip Access Policy Manager 14.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 15.0.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Application Security Manager 14.0.0F5 Big-ip Application Security Manager
7.5
CVSSv3
CVE-2019-11477
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kern...
Linux Linux KernelF5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 15.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 15.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 15.0.0F5 Big-ip Link ControllerF5 Big-ip Link Controller 15.0.0F5 Big-ip Policy Enforcement ManagerF5 Big-ip Policy Enforcement Manager 15.0.0F5 Big-ip WebacceleratorF5 Big-ip Webaccelerator 15.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 15.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 15.0.0F5 Big-ip Fraud Protection ServiceF5 Big-ip Fraud Protection Service 15.0.0F5 Big-ip Global Traffic ManagerF5 Big-ip Global Traffic Manager 15.0.0F5 Big-ip Analytics
7.5
CVSSv3
CVE-2019-11478
Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fi...
Linux Linux KernelF5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 15.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 15.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 15.0.0F5 Big-ip Link ControllerF5 Big-ip Link Controller 15.0.0F5 Big-ip Policy Enforcement ManagerF5 Big-ip Policy Enforcement Manager 15.0.0F5 Big-ip WebacceleratorF5 Big-ip Webaccelerator 15.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 15.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 15.0.0F5 Big-ip Fraud Protection ServiceF5 Big-ip Fraud Protection Service 15.0.0F5 Big-ip Global Traffic ManagerF5 Big-ip Global Traffic Manager 15.0.0F5 Big-ip Analytics
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook