Unscored severity · published Dec 24, 2009
CVE-2009-4420
Buffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager (ASM) 9.4.4 through 9.4.7 and 10.0.0 through 10.0.1, and Protocol Security Manager (PSM) 9.4.5…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Buffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager (ASM) 9.4.4 through 9.4.7 and 10.0.0 through 10.0.1, and Protocol Security Manager (PSM) 9.4.5 through 9.4.7 and 10.0.0 through 10.0.1, allows remote attackers to cause a denial of service (crash) via unknown vectors. NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Big-ip Application Security Manager · F5
9.4.4; 9.4.5; 9.4.6; 9.4.7; 10.0.0; 10.0.1 · source: NVD
BP
Big-ip Protocol Security Manager · F5
9.4.5; 9.4.6; 9.4.7; 10.0.1 · source: NVD
BP
Big-ip Protocol Security Module · F5
10.0.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-4420
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-4420
osvdb.org
http://osvdb.org/61297
Vendor Advisory
http://secunia.com/advisories/37805
www.securityfocus.com
http://www.securityfocus.com/bid/37452
www.securitytracker.com
http://www.securitytracker.com/id?1023386
Vendor Advisory
http://www.vupen.com/english/advisories/2009/3627
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/55005
More from Big-ip Application Security Manager
9.8
CVE-2023-46747
BIG-IP Configuration utility unauthenticated remote code execution vulnerability
9.8
CVE-2022-1388
F5 BIG-IP Missing Authentication Vulnerability
9.8
CVE-2021-22991
F5 BIG-IP Traffic Management Microkernel Buffer Overflow
9.8
CVE-2021-22986
F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
9.8
CVE-2020-5902
F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability