F5 Big-ip Webaccelerator any version

BIG-IP SCP and SFTP vulnerability

BIG-IP Appliance mode external monitor vulnerability

BIG-IP iRules vulnerability

BIG-IP SIP ALG profile vulnerability

BIG-IP HTTP/2 vulnerability

SCTP Vulnerability

BIG-IP HTTP/2 vulnerability

BIG-IP scripted monitor vulnerability

iControl REST and TMSH vulnerability

BIG-IP iControl SOAP vulnerability

BIG-IP iControl SOAP vulnerability

BIG-IP Privilege Escalation vulnerability

BIG-IP SIP MRF Vulnerability

BIG-IP iControl REST and tmsh vulnerability

BIG-IP TMSH vulnerability

BIG-IP IPSec vulnerability

TMM vulnerability

BIG-IP DNS cache vulnerability

BIG-IP iRules vulnerability

TMM vulnerability

BIG-IP Client SSL profile vulnerability

BIG-IP and BIG-IQ privilege escalation vulnerability

BIG-IP and BIG-IQ privilege escalation vulnerability

BIG-IP DTLS 1.2 Vulnerability

BIG-IP monitors vulnerability

iControl REST and tmsh vulnerability

BIG-IP Configuration utility and tmsh vulnerability

BIG-IP Configuration utility XSS vulnerability

BIG-IP tmsh vulnerability

BIG-IP MPTCP vulnerability

BIG-IP TMM vulnerability

BIG-IP HSB vulnerability

In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, 12.0.0 - 12.1.2, 11.6.0 - 11.6.1 and 11.5.0 - 11.5.4, in some circumstances, Traffic Management Microkernel (TMM) does not properly handle certain malformed TLS1.2 records, which allows remote attackers to cause a denial-of-service (DoS) or possible remote command execution on the BIG-IP system.

F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.6, or 11.2.1-11.6.3.2 HTTPS health monitors do not validate the identity of the monitored server.

Multi-blade VIPRION Configuration utility session cookie vulnerability

BIG-IP Configuration utility XSS vulnerability

BIG-IP Configuration utility vulnerability

Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service