Skip to contentF5 Big-ip vulnerabilities
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +18 more +20 moreJonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This...CVE-2019-11479Fix availableEPSS 91.3%5.3 Medium
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +21 more +23 moreSACK can cause extensive memory use via fragmented resend queueCVE-2019-11478Public exploitFix availableEPSS 94.4%5.3 Medium
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +21 more +23 moreInteger overflow in TCP_SKB_CB(skb)->tcp_gso_segsCVE-2019-11477Public exploitFix availableEPSS 98.7%7.5 High
- wireshark, canonical ubuntu linux, debian linux +13 more +15 moreIn Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could...CVE-2019-12295Fix available7.5 High
- open source alpine linux, f5 big-ip controller, gliderlabs docker-alpine +1 more +3 moreVersions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the ...CVE-2019-5021Fix available9.8 Critical
- f5 big-ip (ltm, aam, afm, apm, asm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +6 more +8 moreOn BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, the Traffic Management Microkernel...CVE-2019-66197.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8,...CVE-2019-66184.9 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, a...CVE-2019-66176.5 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8,...CVE-2019-66167.2 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, internal methods used to prevent...CVE-2019-66146.5 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8,...CVE-2019-66154.9 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, SNMP may expose...CVE-2019-66135.3 Medium
- f5 big-ip (ltm, aam, afm, apm, asm, dns, gtm, link controller, pem), big-ip access policy manager, big-ip advanced firewall manager +7 more +9 moreOn BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8,...CVE-2019-66127.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreWhen BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8...CVE-2019-66117.5 High
- isc bind, bind 9, f5 big-ip access policy manager +15 more +17 moreLimiting simultaneous TCP clients was ineffectiveCVE-2018-5743Fix available7.5 High
- f5 big-ip apm, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 morePlatform dependent weakness. This issue only impacts iSeries platforms. On these platforms, in...CVE-2019-66099.8 Critical
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +1 moreOn BIG-IP versions 14.0.0-14.0.0.4, 13.0.0-13.1.1.1, 12.1.0-12.1.4, 11.6.0-11.6.3.4, and 11.5.1...CVE-2019-66108.6 High
- big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +13 more +15 moreOn BIG-IP 11.5.1-11.6.3, 12.1.0-12.1.3, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2, under certain...CVE-2019-66085.9 Medium
- big-ip (asm), f5 big-ip (asm), big-ip application security manager +2 moreOn BIG-IP ASM 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, 13.0.0-13.1.1.3, and 14.0.0-14.0.0.2,...CVE-2019-66076.8 Medium
- big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +12 more +14 moreOn BIG-IP 11.5.1-11.6.3.4, 12.1.0-12.1.3.7, 13.0.0-13.1.1.3, and 14.0.0-14.0.0.2, when processing...CVE-2019-66064.3 Medium
- big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +13 more +15 moreOn BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3.6, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2,...CVE-2019-66046.8 Medium
- big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +12 more +14 moreOn BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, and 12.0.x, an undisclosed sequence of packets received...CVE-2019-66057.5 High
- big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +12 more +14 moreIn BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, and 13.0.0-13.0.1, malformed TCP packets...CVE-2019-66037.5 High
- big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +12 more +14 moreIn BIG-IP 11.5.1-11.5.8 and 11.6.1-11.6.3, the Configuration Utility login page may not follow...CVE-2019-66027.5 High
- f5 big-ip application acceleration manager, f5 networks, inc. big-ip (aam) +1 moreIn BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application...CVE-2019-66015.5 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreIn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8,...CVE-2019-66006.1 Medium
- f5 big-ip access policy manager, f5 networks, inc. big-ip apm; enterprise manager +1 moreIn BIG-IP 11.6.1-11.6.3.2 or 11.5.1-11.5.8, or Enterprise Manager 3.1.1, improper escaping of...CVE-2019-65996.1 Medium
- f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or...CVE-2019-65984.3 Medium
- f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn BIG-IP 13.0.0-13.1.1.1, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise...CVE-2019-65977.2 High
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreIn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, 12.1.0-12.1.3.6, 11.6.1-11.6.3.2, or 11.5.1-11.5.8,...CVE-2019-65967.5 High
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreCross-site scripting (XSS) vulnerability in F5 BIG-IP Access Policy Manager (APM) 11.5.x and 11.6...CVE-2019-65956.1 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreOn BIG-IP 11.5.1-11.6.3.2, 12.1.3.4-12.1.3.7, 13.0.0 HF1-13.1.1.1, and 14.0.0-14.0.0.2, Multi...CVE-2019-65945.9 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreOn BIG-IP 11.5.1-11.5.4, 11.6.1, and 12.1.0, a virtual server configured with a Client SSL...CVE-2019-65935.9 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreOn BIG-IP 14.1.0-14.1.0.1, TMM may restart and produce a core file when validating SSL...CVE-2019-65929.1 Critical
- openssl, canonical ubuntu linux, debian linux +79 more +81 more0-byte record padding oracleCVE-2019-1559Fix availableEPSS 17.1%5.9 Medium
- gnu binutils, canonical ubuntu linux, f5 big-ip access policy manager +15 more +17 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...CVE-2019-9075Fix available7.8 High
- getbootstrap bootstrap, f5 big-ip access policy manager, big-ip advanced firewall manager +13 more +15 moreBootstrap Vulnerable to Cross-Site ScriptingCVE-2019-8331Public exploitFix availableEPSS 16.4%6.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moreIn the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles...CVE-2019-6974Public exploitFix availableEPSS 16.5%8.1 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, and 11.6.0-11.6.3.2, a reflected...CVE-2019-65896.1 Medium
- curl, haxx libcurl, canonical ubuntu linux +8 more +10 morelibcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read....CVE-2018-16890Public exploitFix available5.4 Medium
- f5 big-ip local traffic manager, f5 networks, inc. big-ip (ltm) +1 moreOn BIG-IP LTM 13.0.0 to 13.0.1 and 12.1.0 to 12.1.3.6, under certain conditions, the TMM may...CVE-2019-65905.9 Medium
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreOn BIG-IP APM 14.0.0 to 14.0.0.4, 13.0.0 to 13.1.1.3 and 12.1.0 to 12.1.3.7, a reflected cross...CVE-2019-65915.4 Medium
- ipinfusion ocnos, zebos, f5 big-ip local traffic manager +2 moreThe BGP daemon (bgpd) in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3...CVE-2018-175397.5 High
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreWhen APM 13.0.0-13.1.x is deployed as an OAuth Resource Server, APM becomes a client application...CVE-2018-153355.9 Medium
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreA cross-site request forgery (CSRF) vulnerability in the APM webtop 11.2.1 or greater may allow...CVE-2018-153344.3 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's user...CVE-2018-153335.5 Medium
- f5 big-ip application acceleration manager, f5 networks, inc. big-ip (aam) +1 moreOn BIG-IP AAM 13.0.0 or 12.1.0-12.1.3.7, the dcdb_convert utility used by BIG-IP AAM fails to...CVE-2018-153317.8 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, when a virtual server using the...CVE-2018-153307.5 High
- f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, or Enterprise Manager 3.1.1, when...CVE-2018-153297.2 High
- f5 enterprise manager, iworkflow, big-ip access policy manager +14 more +16 moreOn BIG-IP 14.0.x, 13.x, 12.x, and 11.x, Enterprise Manager 3.1.1, BIG-IQ 6.x, 5.x, and 4.x, and...CVE-2018-153287.5 High
- Show moreLoading…