BA
Product
Big-ip Analytics
On CISA KEVExploited in the wildRansomware-linked
510
CVEs
11
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 34High 277Medium 176Low 4
Watch
Add Big-ip Analytics to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-5918 | 7.5 | Aug 26 | In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management Microkernel (TMM) may stop… Affected: 11.6.1 before 11.6.5.2; 12.1.0 before 12.1.5.2; 13.1.0 before 13.1.3.4; 14.1.0 before 14.1.2.5; 15.0.0 before 15.0.1.4; 15.1.0 before 15.1.0.5 |
| CVE-2020-5891 | 7.5 | Apr 30 | On BIG-IP 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, undisclosed HTTP/2 requests can lead to a denial of service when sent to a virtual server configured with the… Affected: 14.1.0 through 14.1.2.3; 15.0.0 through 15.0.1.2; 15.1.0 through 15.1.0.1 |
| CVE-2020-5882 | 7.5 | Apr 30 | On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5, and 11.6.1-11.6.5.1, under certain conditions, the Intel QuickAssist Technology (QAT) cryptography… Affected: 11.6.1 through 11.6.5.1; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3.3; 14.1.0 through 14.1.2.3; 15.0.0 through 15.0.1.3 |
| CVE-2020-5881 | 7.5 | Apr 30 | On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when the BIG-IP Virtual Edition (VE) is configured with VLAN groups and there are devices configured with OSPF… Affected: 13.1.0 through 13.1.3.3; 14.1.0 through 14.1.2.3; 15.0.0 through 15.1.0.1 |
| CVE-2020-5878 | 7.5 | Apr 30 | On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.3, Traffic Management Microkernel (TMM) may restart on BIG-IP Virtual Edition (VE) while processing unusual IP… Affected: 14.1.0 through 14.1.2.3; 15.0.0 through 15.0.1.1; 15.1.0 through 15.1.0.1 |
| CVE-2020-5877 | 7.5 | Apr 30 | On BIG-IP 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, malformed input to the DATAGRAM::tcp iRules command within a FLOW_INIT event may… Affected: 11.6.1 through 11.6.5.1; 12.1.0 through 12.1.5.1; 13.1.0 through 13.1.3.3; 14.1.0 through 14.1.2.3; 15.0.0 through 15.1.0.1 |
| CVE-2020-5875 | 7.5 | Apr 30 | On BIG-IP 15.0.0-15.0.1 and 14.1.0-14.1.2.3, under certain conditions, the Traffic Management Microkernel (TMM) may generate a core file and restart while processing SSL traffic… Affected: 14.1.0 through 14.1.2.3; 15.0.0 through 15.0.1 |
| CVE-2020-5872 | 7.5 | Apr 30 | On BIG-IP 14.1.0-14.1.2.3, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.4.1, when processing TLS traffic with hardware cryptographic acceleration enabled on platforms with… Affected: 12.1.0 through 12.1.4.1; 13.1.0 through 13.1.3.1; 14.0.0 through 14.0.1; 14.1.0 through 14.1.2.3 |
| CVE-2020-5871 | 7.5 | Apr 30 | On BIG-IP 14.1.0-14.1.2.3, undisclosed requests can lead to a denial of service (DoS) when sent to BIG-IP HTTP/2 virtual servers Affected: 14.1.0 through 14.1.2.3 |
| CVE-2020-5862 | 7.5 | Mar 27 | On BIG-IP 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.2, under certain conditions, TMM may crash or stop processing new traffic with the DPDK/ENA driver on AWS systems… Affected: 14.1.0 through 14.1.2; 15.0.0 through 15.0.1.1; 15.1.0 through 15.1.0.1 |
| CVE-2020-5861 | 7.5 | Mar 27 | On BIG-IP 12.1.0-12.1.5, the TMM process may produce a core file in some cases when Ram Cache incorrectly optimizes stored data resulting in memory errors Affected: 12.1.0 through 12.1.5 |
| CVE-2020-5859 | 7.5 | Mar 27 | On BIG-IP 15.1.0.1, specially formatted HTTP/3 messages may cause TMM to produce a core file Affected: 15.0.0 through 15.0.1.1 |
| CVE-2020-5857 | 7.5 | Mar 27 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, undisclosed HTTP behavior may lead to a denial of service Affected: 11.5.2 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3; 14.1.0 through 14.1.2; 15.0.0 through 15.0.1 |
| CVE-2020-5856 | 7.5 | Feb 6 | On BIG-IP 15.0.0-15.0.1.1 and 14.1.0-14.1.2.2, while processing specifically crafted traffic using the default 'xnet' driver, Virtual Edition instances hosted in Amazon Web… Affected: 14.1.0 before 14.1.2.3; 15.0.0 before 15.1.0 |
| CVE-2020-5852 | 7.5 | Jan 14 | Undisclosed traffic patterns received may cause a disruption of service to the Traffic Management Microkernel (TMM) Affected: 11.5.4.2.74.291; 12.1.4.1.0.97.6; 14.1.2.1.0.83.4 |
| CVE-2019-6684 | 7.5 | Dec 23 | On versions 15.0.0-15.0.1.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, under certain conditions, a multi-bladed BIG-IP Virtual Clustered… Affected: 11.5.2 through 11.6.5; 12.1.0 through 12.1.5; 13.0.0 before 13.1.3.2; 14.0.0 before 14.1.2.3; 15.0.0 before 15.1.0 |
| CVE-2019-6683 | 7.5 | Dec 23 | On versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IP virtual servers with Loose Initiation enabled on a FastL4… Affected: 11.5.2 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.2.3; 15.0.0 before 15.1.0 |
| CVE-2019-6680 | 7.5 | Dec 23 | On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5, while processing traffic through a standard virtual server that… Affected: 11.5.2 before 11.6.5.1; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.2.1; 15.0.0 before 15.0.1.1 |
| CVE-2019-6677 | 7.5 | Dec 23 | On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, under certain conditions when using custom TCP congestion control settings in a… Affected: 12.1.0 through 12.1.5; 13.1.0 before 13.1.3.2; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.2.1; 15.0.0 before 15.0.1.1 |
| CVE-2019-6676 | 7.5 | Dec 23 | On versions 15.0.0-15.0.1, 14.0.0-14.1.2.2, and 13.1.0-13.1.3.1, TMM may restart on BIG-IP Virtual Edition (VE) when using virtio direct descriptors and packets 2 KB or larger Affected: 13.1.0 before 13.1.3.2; 14.0.0 before 14.1.2.3; 15.0.0 before 15.0.1.1 |
| CVE-2019-6671 | 7.5 | Nov 27 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, under certain conditions tmm may leak memory when processing packet fragments, leading to resource… Affected: 13.1.0 through 13.1.3.1; 14.0.0 through 14.0.1; 14.1.0 through 14.1.2; 15.0.0 through 15.0.1 |
| CVE-2019-6669 | 7.5 | Nov 27 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, undisclosed traffic flow may cause TMM to restart under some… Affected: 11.5.1 through 11.6.5.1; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3.1; 14.0.0 through 14.0.1; 14.1.0 through 14.1.2; 15.0.0 through 15.0.1 |
| CVE-2019-6667 | 7.5 | Nov 27 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.1.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.5.1-11.6.5, under certain conditions, TMM may consume excessive resources when… Affected: 11.5.1 through 11.6.5; 12.1.0 through 12.1.4.1; 13.1.0 through 13.1.1.5; 14.0.0 through 14.0.0.4; 14.1.0 through 14.1.0.5; 15.0.0 through 15.0.1 |
| CVE-2019-6666 | 7.5 | Nov 27 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, and 13.1.0-13.1.1.4, the TMM process may produce a core file when an upstream server or cache sends the BIG-IP an… Affected: 13.1.0 through 13.1.1.4; 14.0.0 through 14.0.0.4; 14.1.0 through 14.1.0.5; 15.0.0 through 15.0.1 |
| CVE-2019-6664 | 7.5 | Nov 15 | On BIG-IP 15.0.0 and 14.1.0-14.1.0.6, under certain conditions, network protections on the management port do not follow current best practices Affected: 14.1.0 before 14.1.2; 15.0.0 |
| CVE-2019-6660 | 7.5 | Nov 15 | On BIG-IP 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.1, undisclosed HTTP requests may consume excessive amounts of systems resources which may lead to a denial of service Affected: 13.1.0 before 13.1.3; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.2.1 |
| CVE-2019-6659 | 7.5 | Nov 15 | On version 14.0.0-14.1.0.1, BIG-IP virtual servers with TLSv1.3 enabled may experience a denial of service due to undisclosed incoming messages Affected: 14.0.0 before 14.1.0.2 |
| CVE-2018-5743 | 7.5 | Oct 9 | By design, BIND is intended to limit the number of TCP clients that can be connected at any given time Affected: 11.5.2 through 11.6.5; 12.1.0 through 12.1.4; 13.0.0 through 13.1.1; 14.0.0 through 14.1.0; 15.0.0 |
| CVE-2018-14880 | 7.5 | Oct 3 | The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr() Affected: 11.5.2 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3; 14.0.0 through 14.1.2; 15.0.0 through 15.0.1 |
| CVE-2018-14468 | 7.5 | Oct 3 | The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print() Affected: 11.6.0 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3; 14.0.0 through 14.1.2; 15.0.0 through 15.0.1 |
| CVE-2019-6643 | 7.5 | Sep 4 | On versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, and 11.5.2-11.6.4, an attacker sending specifically crafted DHCPv6 requests through a BIG-IP virtual… Affected: 11.5.2 through 11.6.4; 12.1.0 through 12.1.4; 13.0.0 through 13.1.1; 14.0.0; 14.1.0 |
| CVE-2019-6645 | 7.5 | Sep 4 | On BIG-IP 14.0.0-14.1.0.5, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, FTP traffic passing through a Virtual Server with both an active FTP profile associated and connection… Affected: 11.5.2 through 11.6.4; 12.1.0 through 12.1.4; 13.0.0 through 13.1.1; 14.0.0; 14.1.0 |
| CVE-2019-6631 | 7.5 | Jul 3 | On BIG-IP 11.5.1-11.6.4, iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated… Affected: 11.5.2 through 11.6.4 |
| CVE-2019-6629 | 7.5 | Jul 3 | On BIG-IP 14.1.0-14.1.0.5, undisclosed SSL traffic to a virtual server configured with a Client SSL profile may cause TMM to fail and restart Affected: 14.1.0.1 through 14.1.0.5 |
| CVE-2019-6623 | 7.5 | Jul 2 | On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, undisclosed traffic sent to BIG-IP iSession virtual server may cause the Traffic Management… Affected: 12.1.0 through 12.1.4; 13.0.0 through 13.1.1.4; 14.0.0 through 14.0.0.4; 14.1.0 through 14.1.0.5 |
| CVE-2019-6624 | 7.5 | Jul 2 | On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, an undisclosed traffic pattern sent to a BIG-IP UDP virtual server may lead to a denial-of-service… Affected: 12.1.0 through 12.1.4; 13.0.0 through 13.1.1.4; 14.0.0 through 14.0.0.4; 14.1.0 through 14.1.0.5 |
| CVE-2019-11479 | 7.5 | Jun 19 | Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes Affected: 11.5.2 before 11.6.5.1; 12.1.0 before 12.1.5.1; 13.1.0 before 13.1.3.2; 14.0.0 before 14.0.1.1; 14.1.2 before 14.1.2.1; 15.0.0 before 15.0.1.1 |
| CVE-2019-11478 | 7.5 | Jun 19 | Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective… Affected: 11.5.2 through 11.6.4; 12.1.0 through 12.1.4; 13.1.0 through 13.1.1; 14.0.0 through 14.1.0; 15.0.0 |
| CVE-2019-11477 | 7.5 | Jun 19 | Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs) Affected: 11.5.2 through 11.6.4; 12.1.0 through 12.1.4; 13.1.0 through 13.1.1; 14.0.0 through 14.1.0; 15.0.0 |
| CVE-2019-12295 | 7.5 | May 23 | In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash Affected: 12.1.3.6 before 12.1.5.3; 13.1.1.2 before 13.1.3.5; 14.0.0.3 through 14.0.1; 14.1.0 before 14.1.2.8; 15.0.0 through 15.0.1; 15.1.0 |
| CVE-2019-6611 | 7.5 | May 3 | When BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8 are processing certain rare data sequences occurring in PPTP VPN traffic, the… Affected: 11.5.2 before 11.5.9; 11.6.1 before 11.6.4; 12.1.0 before 12.1.4.1; 13.0.0 before 13.1.1.5; 14.0.0 before 14.1.0.2 |
| CVE-2019-6605 | 7.5 | Mar 28 | On BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, and 12.0.x, an undisclosed sequence of packets received by an SSL virtual server and processed by an associated Client SSL or Server SSL… Affected: 11.5.0 before 11.5.9; 11.6.0 before 11.6.4; 12.0.0 before 12.1.0 |
| CVE-2019-6603 | 7.5 | Mar 28 | In BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, and 13.0.0-13.0.1, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of… Affected: 11.5.1 through 11.5.8; 11.6.1 through 11.6.3; 12.1.0 through 12.1.3; 13.0.0 through 13.0.1 |
| CVE-2019-6602 | 7.5 | Mar 28 | In BIG-IP 11.5.1-11.5.8 and 11.6.1-11.6.3, the Configuration Utility login page may not follow best security practices when handling a malicious request Affected: 11.5.1 through 11.5.8; 11.6.1 through 11.6.3 |
| CVE-2018-15330 | 7.5 | Dec 20 | On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, when a virtual server using the inflate functionality to process a gzip bomb as a payload, the BIG-IP system will… Affected: 12.1.0 through 12.1.3.7; 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2 |
| CVE-2018-15328 | 7.5 | Dec 12 | On BIG-IP 14.0.x, 13.x, 12.x, and 11.x, Enterprise Manager 3.1.1, BIG-IQ 6.x, 5.x, and 4.x, and iWorkflow 2.x, the passphrases for SNMPv3 users and trap destinations that are used… Affected: 11.2.1 through 11.6.3; 12.1.0 through 12.1.3; 13.0.0 through 13.1.1; 14.0.0 |
| CVE-2018-15320 | 7.5 | Oct 31 | On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, undisclosed traffic patterns may lead to denial of service conditions for the BIG-IP system Affected: 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2 |
| CVE-2018-15319 | 7.5 | Oct 31 | On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart Affected: 12.1.0 through 12.1.3.6; 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2 |
| CVE-2018-15318 | 7.5 | Oct 31 | In BIG-IP 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, or 12.1.3.4-12.1.3.6, If an MPTCP connection receives an abort signal while the initial flow is not the primary flow, the initial… Affected: 12.1.3.4 through 12.1.3.6; 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2 |
| CVE-2018-15317 | 7.5 | Oct 31 | In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an attacker sending specially crafted SSL records to a SSL Virtual Server will cause corruption… Affected: 11.2.1 through 11.5.6; 11.6.0 through 11.6.3.2; 12.1.0 through 12.1.3.5; 13.0.0 through 13.1.0.7; 14.0.0 through 14.0.0.2 |
The 500 most important CVEs for this product (exploited first, then by severity)