BP
Product
Big-ip Protocol Security Module
On CISA KEVExploited in the wild
59
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 21Medium 18Low 0
Watch
Add Big-ip Protocol Security Module to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-0196 In wildKEV | 5.5 | May 7 | Linux Kernel Race Condition Vulnerability Affected: 11.1.0 through 11.4.1 |
| CVE-2016-5022 | 9.8 | Sep 7 | F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1 HF1, and 12.x before 12.0.0 HF3;… Affected: 11.2.0; 11.2.1; 11.3.0; 11.4.0; 11.4.1 |
| CVE-2011-3188 | 9.1 | May 24 | The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes… Affected: 10.0.0 through 10.2.4; 11.0.0 through 11.1.0 |
| CVE-2016-5020 | 8.8 | Jun 30 | F5 BIG-IP before 12.0.0 HF3 allows remote authenticated users to modify the account configuration of users with the Resource Administration role and gain privilege via a crafted… Affected: 10.2.1; 10.2.2; 10.2.3; 10.2.4; 11.4.0; 11.4.1; +1 more |
| CVE-2018-15320 | 7.5 | Oct 31 | On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, undisclosed traffic patterns may lead to denial of service conditions for the BIG-IP system Affected: 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2 |
| CVE-2018-15319 | 7.5 | Oct 31 | On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart Affected: 12.1.0 through 12.1.3.6; 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2 |
| CVE-2018-15318 | 7.5 | Oct 31 | In BIG-IP 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, or 12.1.3.4-12.1.3.6, If an MPTCP connection receives an abort signal while the initial flow is not the primary flow, the initial… Affected: 12.1.3.4 through 12.1.3.6; 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2 |
| CVE-2018-15317 | 7.5 | Oct 31 | In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an attacker sending specially crafted SSL records to a SSL Virtual Server will cause corruption… Affected: 11.2.1 through 11.5.6; 11.6.0 through 11.6.3.2; 12.1.0 through 12.1.3.5; 13.0.0 through 13.1.0.7; 14.0.0 through 14.0.0.2 |
| CVE-2016-7475 | 7.5 | Oct 8 | Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the Traffic Management Microkernel (TMM) may not properly clean-up pool member network… Affected: 11.4.0 through 11.4.1 |
| CVE-2017-6155 | 7.5 | Apr 13 | On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or HTTP/2 requests may result in a disruption of service to TMM Affected: 11.5.1 through 11.5.5; 11.6.1 through 11.6.2; 12.1.0 through 12.1.3; 11.2.1; 13.0.0 |
| CVE-2016-7476 | 7.5 | May 11 | The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, APM, ASM, GTM, Link Controller, PEM, PSM, and WebSafe 11.6.0 before 11.6.0 HF6, 11.5.0 before 11.5.3 HF2, and… Affected: 11.3.0; 11.4.0; 11.4.1 |
| CVE-2016-9250 | 7.5 | May 10 | In F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user with access to the control plane may be able to delete arbitrary files through an… Affected: 11.4.0; 11.4.1 |
| CVE-2017-6128 | 7.5 | May 1 | An attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in F5 BIG-IP, Enterprise Manager, BIG-IQ, and iWorkflow Affected: 11.4.0; 11.4.1 |
| CVE-2016-9252 | 7.5 | Mar 27 | The Traffic Management Microkernel (TMM) in F5 BIG-IP before 11.5.4 HF3, 11.6.x before 11.6.1 HF2 and 12.x before 12.1.2 does not properly handle minimum path MTU options for… Affected: 10.2.1; 10.2.2; 10.2.3; 10.2.4; 11.2.1; 11.4.0; +1 more |
| CVE-2016-9244 | 7.5 | Feb 9 | A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory Affected: 11.4.0; 11.4.1 |
| CVE-2016-6876 | 7.5 | Sep 7 | The RESOLV::lookup iRule command in F5 BIG-IP LTM, APM, ASM, and Link Controller 10.2.1 through 10.2.4, 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.0.0… Affected: 10.2.1; 10.2.2; 10.2.3; 10.2.4; 11.4.0; 11.4.1 |
| CVE-2016-5023 | 7.5 | Aug 26 | Virtual servers in F5 BIG-IP systems 11.2.1 HF11 through HF15, 11.4.1 HF4 through HF10, 11.5.3 through 11.5.4, 11.6.0 HF5 through HF7, and 12.0.0, when configured with a TCP… Affected: 11.2.1; 11.4.1 |
| CVE-2016-5736 | 7.5 | Aug 19 | The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x… Affected: 11.4.0; 11.4.1 |
| CVE-2015-8022 | 7.5 | Aug 19 | The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and… Affected: 11.0.0; 11.1.0; 11.2.0; 11.2.1; 11.3.0; 11.4.0; +1 more |
| CVE-2015-8240 | 7.5 | Apr 11 | The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x… Affected: 11.4.1 |
| CVE-2015-5516 | 7.5 | Jan 20 | Memory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before… Affected: 10.1.0; 10.2.0; 10.2.1; 10.2.2; 10.2.3; 10.2.4; +7 more |
| CVE-2016-2084 | 7.4 | Apr 13 | F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256,… Affected: 11.3.0; 11.4.0 |
| CVE-2015-7393 | 7.4 | Jan 12 | dcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AAM 11.4.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1,… Affected: 11.2.0; 11.2.1; 11.3.0; 11.4.0; 11.4.1 |
| CVE-2018-15327 | 7.2 | Oct 31 | In BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1 or Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Management User Interface (TMUI),… Affected: 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2 |
| CVE-2019-6604 | 6.8 | Mar 28 | On BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3.6, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2, under certain conditions, hardware systems with a High-Speed Bridge and using… Affected: 11.2.1 through 11.5.8 |
| CVE-2018-15322 | 6.5 | Oct 31 | On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 6.0.0-6.0.1, 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and… Affected: 11.2.1 through 11.5.6; 11.6.0 through 11.6.3.2; 12.1.0 through 12.1.3.5; 13.0.0 through 13.1.0.7; 14.0.0 through 14.0.0.2 |
| CVE-2013-3587 | 5.9 | Feb 21 | The HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which makes it easier for… Affected: 9.4.5 through 9.4.8; 10.0.0 through 10.2.4; 11.0.0 through 11.4.1 |
| CVE-2019-6608 | 5.9 | Mar 28 | On BIG-IP 11.5.1-11.6.3, 12.1.0-12.1.3, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2, under certain conditions, the snmpd daemon may leak memory on a multi-blade BIG-IP vCMP guest when… Affected: 11.2.1 through 11.6.3 |
| CVE-2018-15323 | 5.9 | Oct 31 | On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, in certain circumstances, when processing traffic through a Virtual Server with an associated MQTT profile, the TMM process may… Affected: 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2 |
| CVE-2014-4024 | 5.9 | Mar 19 | SSL virtual servers in F5 BIG-IP systems 10.x before 10.2.4 HF9, 11.x before 11.2.1 HF12, 11.3.0 before HF10, 11.4.0 before HF8, 11.4.1 before HF5, 11.5.0 before HF5, and 11.5.1… Affected: 10.0.0 through 10.2.4; 11.0.0 through 11.4.1 |
| CVE-2017-6163 | 5.9 | Oct 27 | In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, when a virtual server uses the standard… Affected: after 11.4.0 through 11.5.4; 11.6.0; 11.6.1; 12.0.0; 12.1.0; 12.1.1; +1 more |
| CVE-2016-7468 | 5.9 | Mar 23 | An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic Affected: 11.4.0; 11.4.1 |
| CVE-2015-8099 | 5.9 | May 13 | F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF1; BIG-IP… Affected: 11.3.0; 11.4.0; 11.4.1 |
| CVE-2016-7474 | 5.5 | Mar 27 | In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain normally… Affected: 11.4.0; 11.4.1 |
| CVE-2016-7469 | 5.4 | Jun 9 | A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link… Affected: 11.4.0; 11.4.1 |
| CVE-2014-5209 | 5.3 | Jan 8 | An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive… Affected: 10.2.1 through 10.2.4; 11.4.0 through 11.4.1 |
| CVE-2018-15321 | 4.9 | Oct 31 | When BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and… Affected: 11.2.1 through 11.5.6; 11.6.0 through 11.6.3.2; 12.1.0 through 12.1.3.5; 13.0.0 through 13.1.0.7; 14.0.0 through 14.0.0.2 |
| CVE-2014-6031 | 4.9 | Jun 8 | Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x before 11.4.1 HF9, 11.5.x before 11.5.2 HF1, and 11.6.0… Affected: 10.0.0; 10.1.0; 10.2.0; 10.2.1; 10.2.2; 10.2.3; +8 more |
| CVE-2016-1497 | 4.9 | Aug 26 | The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x before 11.6.1, and… Affected: 11.0.0; 11.1.0; 11.2.0; 11.2.1; 11.3.0; 11.4.0; +1 more |
| CVE-2018-15325 | 4.3 | Oct 31 | In BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, iControl and TMSH usage by authenticated users may leak a small amount of memory when executing commands Affected: 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2 |
| CVE-2015-8021 | 4.3 | Apr 12 | Incomplete blacklist vulnerability in the Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, Link Controller, and PSM 11.x before 11.2.1 HF11, 11.3.x, 11.4.0 before… Affected: 11.0.0; 11.1.0; 11.2.0; 11.2.1; 11.3.0; 11.4.0; +1 more |
| CVE-2015-3628 | – | Dec 7 | The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0 before 11.5.3 HF2 and 11.6.0 before 11.6.0 HF6, BIG-IP AAM 11.4.0 before 11.5.3 HF2… Affected: 11.3.0; 11.4.0; 11.4.1 |
| CVE-2015-7394 | – | Nov 6 | The datastor kernel module in F5 BIG-IP Analytics, APM, ASM, Link Controller, and LTM 11.1.0 before 12.0.0, BIG-IP AAM 11.4.0 before 12.0.0, BIG-IP AFM, PEM 11.3.0 before 12.0.0,… Affected: 11.1.0; 11.2.0; 11.2.1; 11.3.0; 11.4.0; 11.4.1 |
| CVE-2015-6546 | – | Nov 6 | The vCMP host in F5 BIG-IP Analytics, APM, ASM, GTM, Link Controller, and LTM 11.0.0 before 11.6.0, BIG-IP AAM 11.4.0 before 11.6.0, BIG-IP AFM and PEM 11.3.0 before 11.6.0,… Affected: 11.0.0; 11.1.0; 11.2.0; 11.2.1; 11.3.0; 11.4.0; +1 more |
| CVE-2015-4638 | – | Sep 18 | The FastL4 virtual server in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.3.0 through 11.5.2 and 11.6.0 through 11.6.0 HF4, BIG-IP Edge Gateway,… Affected: 11.2.1; 11.3.0; 11.4.0; 11.4.1 |
| CVE-2015-4040 | – | Sep 17 | Directory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and Enterprise Manager 3.0.0 through 3.1.1 allows remote authenticated users to access… Affected: through 11.3.0 |
| CVE-2014-8730 | – | Dec 10 | The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, AAM 11.4.0 through 11.5.1, AFM 11.3.0 through 11.5.1, Analytics 11.0.0… Affected: 10.0.0; 10.0.1; 10.1.0; 10.2.0; 10.2.1; 10.2.2; +9 more |
| CVE-2014-6032 | – | Nov 1 | Multiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM, ASM, GTM, and Link Controller 11.0 through 11.6.0 and 10.0.0 through 10.2.4, AAM… Affected: 10.0.0; 10.1.0; 10.2.0; 10.2.1; 10.2.2; 10.2.3; +8 more |
| CVE-2014-4023 | – | Oct 28 | Cross-site scripting (XSS) vulnerability in tmui/dashboard/echo.jsp in the Configuration utility in F5 BIG-IP LTM, APM, ASM, GTM, and Link Controller 11.0.0 before 11.6.0 and… Affected: 10.1.0; 10.2.0; 10.2.1; 10.2.2; 10.2.3; 10.2.4; +7 more |
| CVE-2014-2927 | – | Oct 15 | The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before HF7, 11.3.0 before HF9, and 11.2.1 before HF11 and… Affected: 10.0.0; 10.0.1; 10.1.0; 10.2.0; 10.2.1; 10.2.2; +9 more |