traffix signaling delivery controller vulnerabilities and exploits

(subscribe to this query)

3.5

CVSSv2

On F5 Traffix SDC 5.2.x versions before 5.2.2 and 5.1.x versions before 5.1.35, a stored Cross-Site Template Injection vulnerability exists in an undisclosed page of the Traffix SDC Configuration utility that allows an malicious user to execute template language-specific instruct...

F5 Traffix Signaling Delivery Controller 5.2.0 F5 Traffix Signaling Delivery Controller 5.1.0

3.5

CVSSv2

On F5 Traffix SDC 5.2.x versions before 5.2.2 and 5.1.x versions before 5.1.35, a stored Cross-Site Scripting (XSS) vulnerability exists in an undisclosed page of the Traffix SDC Configuration utility that allows an malicious user to execute JavaScript in the context of the curre...

F5 Traffix Signaling Delivery Controller 5.2.0 F5 Traffix Signaling Delivery Controller 5.1.0

5

CVSSv2

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memory consumption), as demonstrated by cxxfilt, a related issue to CVE-2018-12698.

Gnu Binutils 2.31.1 F5 Traffix Signaling Delivery Controller F5 Traffix Signaling Delivery Controller 4.4.0

4.3

CVSSv2

The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memory leak via a crafted ELF file, leading to a denial of service (memory consumption), as demonstrated by nm.

Gnu Binutils 2.31 Netapp Vasa Provider F5 Traffix Signaling Delivery Controller F5 Traffix Signaling Delivery Controller 4.4.0

5

CVSSv2

The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect Forward Secrecy (PFS), makes it easier for remote malicious users to obtain private RSA keys by conducting a Lenstra side-chann...

Marvell Software Development Kit 2.0 F5 Traffix Signaling Delivery Controller

6.8

CVSSv2

An issue exists in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS option section.

Gnu Binutils 2.32 Netapp Element Software -Canonical Ubuntu Linux 18.04 F5 Traffix Signaling Delivery Controller

5

CVSSv2

In the Linux kernel prior to 5.2.14, rds6_inc_info_copy in net/rds/recv.c allows malicious users to obtain sensitive information from kernel stack memory because tos and flags fields are not initialized.

Linux Linux Kernel Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 19.04 F5 Traffix Signaling Delivery Controller

5

CVSSv2

Apache Thrift Java client library versions 0.5.0 up to and including 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in...

Apache Thrift Debian Debian Linux 8.0 F5 Traffix Signaling Delivery Controller Oracle Global Lifecycle Management Opatch Oracle Nosql Database

6.8

CVSSv2

An issue exists in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d_expression_1 in cp-demangle.c after many recursive calls.

Gnu Binutils 2.32 Netapp Element Software Management Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 16.04 F5 Traffix Signaling Delivery Controller

5

CVSSv2

Interaction between the sks-keyserver code up to and including 1.2.0 of the SKS keyserver network, and GnuPG up to and including 2.2.16, makes it risky to have a GnuPG keyserver configuration line referring to a host on the SKS keyserver network. Retrieving data from this network...

Gnupg Gnupg Sks Keyserver Project Sks Keyserver Fedoraproject Fedora 29 Fedoraproject Fedora 30 Opensuse Leap 15.0 Opensuse Leap 15.1 F5 Traffix Signaling Delivery Controller

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook