Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

f5 traffix systems signaling delivery controller vulnerabilities and exploits

(subscribe to this query)
5.8
CVSSv2
CVE-2019-13115
In libssh2 prior to 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to disclose se...
Libssh2 Libssh2Debian Debian Linux 8.0Debian Debian Linux 9.0Fedoraproject Fedora 29Fedoraproject Fedora 30Netapp Cloud Backup -Netapp Ontap Select Deploy Administration Utility -Netapp E-series Santricity Os ControllerF5 Traffix Systems Signaling Delivery Controller
5
CVSSv2
CVE-2019-13565
An issue exists in OpenLDAP 2.x prior to 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd access controls, it is possible to obtain access that would otherwise be denied via a simple bind for any identity covered in t...
Openldap OpenldapCanonical Ubuntu Linux 16.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 14.04Debian Debian Linux 8.0Opensuse Leap 15.0Opensuse Leap 15.1F5 Traffix Signaling Delivery Controller 5.1.0F5 Traffix Signaling Delivery Controller 5.0.0Apple Mac Os X 10.13.6Apple Mac Os XApple Mac Os X 10.14.6Oracle Solaris 11Oracle Zfs Storage Appliance Kit 8.8Oracle Blockchain Platform
9.3
CVSSv2
CVE-2018-20836
An issue exists in the Linux kernel prior to 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.
Linux Linux KernelCanonical Ubuntu Linux 16.04Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0F5 Traffix Signaling Delivery Controller 5.1.0F5 Traffix Signaling Delivery Controller 5.0.0Netapp Virtual Storage ConsoleNetapp Active Iq Unified ManagerNetapp Vasa Provider For Clustered Data OntapNetapp Solidfire \\& Hci Management Node -Netapp Snapprotect -Netapp Hci Compute Node -Netapp Solidfire \\& Hci Storage Node -Netapp Storage Replication Adapter For Clustered Data Ontap -Opensuse Leap 15.0Opensuse Leap 15.1
5
CVSSv2
CVE-2002-20001
The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs ver...
Balasys Dheater -Siemens Scalance W1750d FirmwareSuse Linux Enterprise Server 15Suse Linux Enterprise Server 11Suse Linux Enterprise Server 12F5 Big-iq Centralized Management 7.1.0F5 Traffix Signaling Delivery Controller 5.2.0F5 Traffix Signaling Delivery Controller 5.1.0F5 Big-iq Centralized ManagementF5 Big-ip Service Proxy 1.6.0F5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Web Application FirewallF5 Big-ip AnalyticsF5 Big-ip Application Acceleration ManagerF5 Big-ip Application Security ManagerF5 Big-ip Application Visibility And ReportingF5 Big-ip Carrier-grade NatF5 Big-ip Ddos Hybrid DefenderF5 Big-ip Domain Name SystemF5 Big-ip Edge GatewayF5 Big-ip Fraud Protection Service
4.6
CVSSv2
CVE-2019-5436
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 up to and including 7.64.1.
Haxx LibcurlOpensuse Leap 42.3Opensuse Leap 15.0Opensuse Leap 15.1Fedoraproject Fedora 29Debian Debian Linux 9.0Debian Debian Linux 10.0F5 Traffix Signaling Delivery ControllerNetapp Steelstore Cloud Integrated Storage -Netapp Solidfire -Netapp Hci Management Node -Oracle Enterprise Manager Ops Center 12.3.3Oracle Enterprise Manager Ops Center 12.4.0Oracle Mysql ServerOracle Oss Support Tools 20.0
5
CVSSv2
CVE-2019-11479
Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixe...
Linux Linux KernelF5 Big-ip Advanced Firewall ManagerF5 Big-ip Access Policy ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Link ControllerF5 Big-ip Policy Enforcement ManagerF5 Big-ip WebacceleratorF5 Big-ip Application Security ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Global Traffic ManagerF5 Big-ip AnalyticsF5 Big-ip Edge GatewayF5 Big-ip Domain Name SystemCanonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 14.04Redhat Enterprise Linux 7.0F5 Enterprise Manager 3.1.1F5 Traffix Signaling Delivery Controller
5
CVSSv2
CVE-2019-11478
Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fi...
Linux Linux KernelF5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 15.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 15.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 15.0.0F5 Big-ip Link ControllerF5 Big-ip Link Controller 15.0.0F5 Big-ip Policy Enforcement ManagerF5 Big-ip Policy Enforcement Manager 15.0.0F5 Big-ip WebacceleratorF5 Big-ip Webaccelerator 15.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 15.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 15.0.0F5 Big-ip Fraud Protection ServiceF5 Big-ip Fraud Protection Service 15.0.0F5 Big-ip Global Traffic ManagerF5 Big-ip Global Traffic Manager 15.0.0F5 Big-ip Analytics
7.8
CVSSv2
CVE-2019-11477
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kern...
Linux Linux KernelF5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 15.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 15.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 15.0.0F5 Big-ip Link ControllerF5 Big-ip Link Controller 15.0.0F5 Big-ip Policy Enforcement ManagerF5 Big-ip Policy Enforcement Manager 15.0.0F5 Big-ip WebacceleratorF5 Big-ip Webaccelerator 15.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 15.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 15.0.0F5 Big-ip Fraud Protection ServiceF5 Big-ip Fraud Protection Service 15.0.0F5 Big-ip Global Traffic ManagerF5 Big-ip Global Traffic Manager 15.0.0F5 Big-ip Analytics
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook