BP
Product
Big-ip Policy Enforcement Manager
On CISA KEVExploited in the wildRansomware-linked
530
CVEs
9
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 33High 294Medium 173Low 0
Watch
Add Big-ip Policy Enforcement Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-14880 | 7.5 | Oct 3 | The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr() Affected: 11.5.2 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3; 14.0.0 through 14.1.2; 15.0.0 through 15.0.1 |
| CVE-2018-14468 | 7.5 | Oct 3 | The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print() Affected: 11.6.0 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3; 14.0.0 through 14.1.2; 15.0.0 through 15.0.1 |
| CVE-2019-6643 | 7.5 | Sep 4 | On versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, and 11.5.2-11.6.4, an attacker sending specifically crafted DHCPv6 requests through a BIG-IP virtual… Affected: 11.5.2 through 11.6.4; 12.1.0 through 12.1.4; 13.0.0 through 13.1.1; 14.0.0; 14.1.0 |
| CVE-2019-6645 | 7.5 | Sep 4 | On BIG-IP 14.0.0-14.1.0.5, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, FTP traffic passing through a Virtual Server with both an active FTP profile associated and connection… Affected: 11.5.2 through 11.6.4; 12.1.0 through 12.1.4; 13.0.0 through 13.1.1; 14.0.0; 14.1.0 |
| CVE-2019-6631 | 7.5 | Jul 3 | On BIG-IP 11.5.1-11.6.4, iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated… Affected: 11.5.2 through 11.6.4 |
| CVE-2019-6629 | 7.5 | Jul 3 | On BIG-IP 14.1.0-14.1.0.5, undisclosed SSL traffic to a virtual server configured with a Client SSL profile may cause TMM to fail and restart Affected: 14.1.0.1 through 14.1.0.5 |
| CVE-2019-6628 | 7.5 | Jul 3 | On BIG-IP PEM 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, under certain conditions, the TMM process may terminate and restart while processing BIG-IP PEM traffic with the OpenVPN… Affected: 14.0.0 through 14.0.0.4; 14.1.0 through 14.1.0.5 |
| CVE-2019-6623 | 7.5 | Jul 2 | On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, undisclosed traffic sent to BIG-IP iSession virtual server may cause the Traffic Management… Affected: 12.1.0 through 12.1.4; 13.0.0 through 13.1.1.4; 14.0.0 through 14.0.0.4; 14.1.0 through 14.1.0.5 |
| CVE-2019-6624 | 7.5 | Jul 2 | On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, an undisclosed traffic pattern sent to a BIG-IP UDP virtual server may lead to a denial-of-service… Affected: 12.1.0 through 12.1.4; 13.0.0 through 13.1.1.4; 14.0.0 through 14.0.0.4; 14.1.0 through 14.1.0.5 |
| CVE-2019-11479 | 7.5 | Jun 19 | Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes Affected: 11.5.2 before 11.6.5.1; 12.1.0 before 12.1.5.1; 13.1.0 before 13.1.3.2; 14.0.0 before 14.0.1.1; 14.1.2 before 14.1.2.1; 15.0.0 before 15.0.1.1 |
| CVE-2019-11478 | 7.5 | Jun 19 | Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective… Affected: 11.5.2 through 11.6.4; 12.1.0 through 12.1.4; 13.1.0 through 13.1.1; 14.0.0 through 14.1.0; 15.0.0 |
| CVE-2019-11477 | 7.5 | Jun 19 | Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs) Affected: 11.5.2 through 11.6.4; 12.1.0 through 12.1.4; 13.1.0 through 13.1.1; 14.0.0 through 14.1.0; 15.0.0 |
| CVE-2019-12295 | 7.5 | May 23 | In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash Affected: 12.1.3.6 before 12.1.5.3; 13.1.1.2 before 13.1.3.5; 14.0.0.3 through 14.0.1; 14.1.0 before 14.1.2.8; 15.0.0 through 15.0.1; 15.1.0 |
| CVE-2019-6619 | 7.5 | May 3 | On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, the Traffic Management Microkernel (TMM) may restart when a virtual server has an HTTP/2 profile with Application… Affected: 12.1.0 before 12.1.4.1; 13.0.0 before 13.1.1.5; 14.0.0 before 14.1.0.2 |
| CVE-2019-6612 | 7.5 | May 3 | On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, DNS query TCP connections that are aborted before receiving a response from a DNS… Affected: 11.5.2 before 11.5.9; 11.6.1 before 11.6.4; 12.1.0 before 12.1.4.1; 13.0.0 before 13.1.1.5; 14.0.0 before 14.1.0.2 |
| CVE-2019-6611 | 7.5 | May 3 | When BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8 are processing certain rare data sequences occurring in PPTP VPN traffic, the… Affected: 11.5.2 before 11.5.9; 11.6.1 before 11.6.4; 12.1.0 before 12.1.4.1; 13.0.0 before 13.1.1.5; 14.0.0 before 14.1.0.2 |
| CVE-2019-6605 | 7.5 | Mar 28 | On BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, and 12.0.x, an undisclosed sequence of packets received by an SSL virtual server and processed by an associated Client SSL or Server SSL… Affected: 11.5.0 before 11.5.9; 11.6.0 before 11.6.4; 12.0.0 before 12.1.0 |
| CVE-2019-6603 | 7.5 | Mar 28 | In BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, and 13.0.0-13.0.1, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of… Affected: 11.5.1 through 11.5.8; 11.6.1 through 11.6.3; 12.1.0 through 12.1.3; 13.0.0 through 13.0.1 |
| CVE-2019-6602 | 7.5 | Mar 28 | In BIG-IP 11.5.1-11.5.8 and 11.6.1-11.6.3, the Configuration Utility login page may not follow best security practices when handling a malicious request Affected: 11.5.1 through 11.5.8; 11.6.1 through 11.6.3 |
| CVE-2018-15330 | 7.5 | Dec 20 | On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, when a virtual server using the inflate functionality to process a gzip bomb as a payload, the BIG-IP system will… Affected: 12.1.0 through 12.1.3.7; 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2 |
| CVE-2018-15328 | 7.5 | Dec 12 | On BIG-IP 14.0.x, 13.x, 12.x, and 11.x, Enterprise Manager 3.1.1, BIG-IQ 6.x, 5.x, and 4.x, and iWorkflow 2.x, the passphrases for SNMPv3 users and trap destinations that are used… Affected: 11.2.1 through 11.6.3; 12.1.0 through 12.1.3; 13.0.0 through 13.1.1; 14.0.0 |
| CVE-2018-15320 | 7.5 | Oct 31 | On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, undisclosed traffic patterns may lead to denial of service conditions for the BIG-IP system Affected: 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2 |
| CVE-2018-15319 | 7.5 | Oct 31 | On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart Affected: 12.1.0 through 12.1.3.6; 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2 |
| CVE-2018-15318 | 7.5 | Oct 31 | In BIG-IP 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, or 12.1.3.4-12.1.3.6, If an MPTCP connection receives an abort signal while the initial flow is not the primary flow, the initial… Affected: 12.1.3.4 through 12.1.3.6; 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2 |
| CVE-2018-15317 | 7.5 | Oct 31 | In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an attacker sending specially crafted SSL records to a SSL Virtual Server will cause corruption… Affected: 11.2.1 through 11.5.6; 11.6.0 through 11.6.3.2; 12.1.0 through 12.1.3.5; 13.0.0 through 13.1.0.7; 14.0.0 through 14.0.0.2 |
| CVE-2016-7475 | 7.5 | Oct 8 | Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the Traffic Management Microkernel (TMM) may not properly clean-up pool member network… Affected: 11.4.0 through 11.6.1; 12.0.0 through 12.1.0 |
| CVE-2018-5391 | 7.5 | Sep 6 | The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly Affected: 11.5.1 before 11.6.5.1; 12.1.0 before 12.1.5; 13.0.0 before 13.1.3; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.2.4 |
| CVE-2018-5390 | 7.5 | Aug 6 | Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service Affected: 11.5.1 through 11.6.3; 12.1.0 through 12.1.3; 13.0.0 through 13.1.1; 14.0.0 |
| CVE-2018-5530 | 7.5 | Jul 25 | F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.1 virtual servers with HTTP/2 profiles enabled are vulnerable to "HPACK Bomb" Affected: 11.6.0 through 11.6.3.1; 12.1.0 through 12.1.3.5; 13.0.0 through 13.1.0.5 |
| CVE-2018-5535 | 7.5 | Jul 19 | On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed by a Virtual Server with an associated QoE profile that has… Affected: 11.2.1 through 11.6.3; 12.1.0 through 12.1.3; 13.0.0 through 13.1.1; 14.0.0 |
| CVE-2018-5534 | 7.5 | Jul 19 | Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic Affected: 11.5.0 through 11.5.6; 11.6.0 through 11.6.3.1; 12.1.0 through 12.1.3.1; 13.1.0 through 13.1.0.5; 13.0.0 |
| CVE-2018-5533 | 7.5 | Jul 19 | Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic Affected: 11.5.0 through 11.5.6; 11.6.0 through 11.6.3.1; 12.1.0 through 12.1.2; 13.0.0 |
| CVE-2018-5527 | 7.5 | Jun 27 | On BIG-IP 13.1.0-13.1.0.7, a remote attacker using undisclosed methods against virtual servers configured with a Client SSL or Server SSL profile that has the SSL Forward Proxy… Affected: 13.0.0 through 13.1.0.7 |
| CVE-2018-5513 | 7.5 | Jun 1 | On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.3, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, a malformed TLS handshake causes TMM to crash leading to a disruption of service Affected: 11.2.1 through 11.5.5; 11.6.1 through 11.6.3; 12.1.0 through 12.1.3; 13.1.0 through 13.1.0.4; 13.0.0 |
| CVE-2018-5517 | 7.5 | May 2 | On F5 BIG-IP 13.1.0-13.1.0.5, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service Affected: 13.1.0 through 13.1.0.5 |
| CVE-2018-5514 | 7.5 | May 2 | On F5 BIG-IP 13.1.0-13.1.0.5, maliciously crafted HTTP/2 request frames can lead to denial of service Affected: 13.1.0 through 13.1.0.5 |
| CVE-2018-5512 | 7.5 | May 2 | On F5 BIG-IP 13.1.0-13.1.0.5, when Large Receive Offload (LRO) and SYN cookies are enabled (default settings), undisclosed traffic patterns may cause TMM to restart Affected: 13.1.0 through 13.1.0.5 |
| CVE-2018-5510 | 7.5 | Apr 13 | On F5 BIG-IP 11.5.4 HF4-11.5.5, the Traffic Management Microkernel (TMM) may restart when processing a specific sequence of packets on IPv6 virtual servers Affected: 11.5.4; 11.5.4; 11.5.4; 11.5.4; 11.5.4; 11.5.5 |
| CVE-2018-5507 | 7.5 | Apr 13 | On F5 BIG-IP versions 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5, vCMP guests running on VIPRION 2100, 4200 and 4300 series blades cannot correctly decrypt… Affected: 11.5.1 through 11.5.5; 11.6.1 through 11.6.2; 12.1.0 through 12.1.3; 13.0.0 |
| CVE-2017-6155 | 7.5 | Apr 13 | On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or HTTP/2 requests may result in a disruption of service to TMM Affected: 11.5.1 through 11.5.5; 11.6.1 through 11.6.2; 12.1.0 through 12.1.3; 11.2.1; 13.0.0 |
| CVE-2017-6148 | 7.5 | Apr 13 | Responses to SOCKS proxy requests made through F5 BIG-IP version 13.0.0, 12.0.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5 may cause a disruption of services provided by TMM Affected: 11.5.1 through 11.5.5; 11.6.1 through 11.6.2; 12.0.0 through 12.1.3; 13.0.0 |
| CVE-2018-5509 | 7.5 | Mar 22 | On F5 BIG-IP versions 13.0.0 or 12.1.0 - 12.1.3.1, when a specifically configured virtual server receives traffic of an undisclosed nature, TMM will crash and take the configured… Affected: 12.1.0 before 12.1.3.2; 13.0.0 before 13.1.0.4 |
| CVE-2018-5503 | 7.5 | Mar 22 | On F5 BIG-IP versions 13.0.0 - 13.1.0.3 or 12.0.0 - 12.1.3.1, TMM may restart when processing a specifically crafted page through a virtual server with an associated PEM policy… Affected: 12.0.0 before 12.1.3.2; 13.0.0 before 13.1.0.4 |
| CVE-2018-5502 | 7.5 | Mar 22 | On F5 BIG-IP versions 13.0.0 - 13.1.0.3, attackers may be able to disrupt services on the BIG-IP system with maliciously crafted client certificate Affected: 13.0.0 before 13.1.0.4 |
| CVE-2017-6150 | 7.5 | Mar 1 | Under certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles, when the Reassemble IP Fragments option is disabled (default), some specific… Affected: 12.1.0 through 12.1.3.1; 13.0.0 |
| CVE-2017-6167 | 7.5 | Dec 21 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, race conditions in iControl REST may lead to… Affected: 12.1.0 through 12.1.2; 13.0.0 |
| CVE-2017-6151 | 7.5 | Dec 21 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, undisclosed requests made to… Affected: 13.0.0 |
| CVE-2017-6140 | 7.5 | Dec 21 | On the BIG-IP 2000s, 2200s, 4000s, 4200v, i5600, i5800, i7600, i7800, i10600,i10800, and VIPRION 4450 blades, running version 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0,… Affected: 11.5.0; 11.5.1; 11.5.2; 11.5.3; 11.5.4; 11.6.0; +5 more |
| CVE-2017-6138 | 7.5 | Dec 21 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, malicious requests made to virtual servers… Affected: 12.1.0 through 12.1.2; 13.0.0 |
| CVE-2017-6135 | 7.5 | Dec 21 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, a slow memory leak as a result of undisclosed IPv4 or IPv6… Affected: 13.0.0 |
The 500 most important CVEs for this product (exploited first, then by severity)