F5 Big-ip Webaccelerator

BIG-IP SSL/TLS vulnerability

BIG-IP PEM iRules vulnerability

BIG-IP TMM Vulnerability

BIG-IP SNMP vulnerability

BIG-IP MPTCP vulnerability

BIG-IP SCP and SFTP vulnerability

BIG-IP Appliance mode external monitor vulnerability

BIG-IP iRules vulnerability

BIG-IP SIP ALG profile vulnerability

BIG-IP HTTP/2 vulnerability

SCTP Vulnerability

BIG-IP HTTP/2 vulnerability

BIG-IP scripted monitor vulnerability

iControl REST and TMSH vulnerability

BIG-IP iControl SOAP vulnerability

BIG-IP iControl SOAP vulnerability

BIG-IP Privilege Escalation vulnerability

BIG-IP SIP MRF Vulnerability

BIG-IP iControl REST and tmsh vulnerability

BIG-IP TMSH vulnerability

BIG-IP IPSec vulnerability

TMM vulnerability

BIG-IP DNS cache vulnerability

BIG-IP iRules vulnerability

TMM vulnerability

BIG-IP Client SSL profile vulnerability

BIG-IP and BIG-IQ privilege escalation vulnerability

BIG-IP and BIG-IQ privilege escalation vulnerability

BIG-IP DTLS 1.2 Vulnerability

BIG-IP monitors vulnerability

iControl REST and tmsh vulnerability

The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP AAM 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP AFM and PEM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; BIG-IP Edge Gateway, WebAccelerator, and WOM 11.x before 11.2.1 HF16 and 11.3.0; and BIG-IP PSM 11.x before 11.2.1 HF16, 11.3.x, and 11.4.x before 11.4.1 HF10 allows remote authenticated users with certain permissions to gain privileges by leveraging an Access Policy Manager customization configuration section that allows file uploads.

BIG-IP Configuration utility and tmsh vulnerability

BIG-IP Configuration utility XSS vulnerability

BIG-IP tmsh vulnerability

BIG-IP MPTCP vulnerability

BIG-IP TMM vulnerability

BIG-IP HSB vulnerability

In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, 12.0.0 - 12.1.2, 11.6.0 - 11.6.1 and 11.5.0 - 11.5.4, in some circumstances, Traffic Management Microkernel (TMM) does not properly handle certain malformed TLS1.2 records, which allows remote attackers to cause a denial-of-service (DoS) or possible remote command execution on the BIG-IP system.