VYPR

Big IP

by F5, Inc.

CVEs (593)

  • CVE-2022-23017HigJan 25, 2022
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when a virtual server is configured with a DNS profile with the Rapid Response Mode setting enabled and is configured on a BIG-IP system, undisclosed requests can…

  • CVE-2022-23016HigJan 25, 2022
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of…

  • CVE-2022-23015HigJan 25, 2022
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, and 14.1.2.6-14.1.4.4, when a Client SSL profile is configured on a virtual server with Client Certificate Authentication set to request/require and Session Ticket enabled and configured, processing SSL traffic can…

  • CVE-2022-23012HigJan 25, 2022
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical…

  • CVE-2022-23011HigJan 25, 2022
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On certain hardware BIG-IP platforms, in version 15.1.x before 15.1.4 and 14.1.x before 14.1.3, virtual servers may stop responding while processing TCP traffic due to an issue in the SYN Cookie Protection feature. Note: Software versions which have reached End of Technical…

  • CVE-2022-23010HigJan 25, 2022
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a FastL4 profile and an HTTP profile are configured on a virtual server, undisclosed requests can cause an increase in memory resource…

  • CVE-2021-23030HigSep 14, 2021
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests can cause bd to terminate.…

  • CVE-2021-23028HigSep 14, 2021
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, and 13.1.x before 13.1.4, when JSON content profiles are configured for URLs as part of an F5 Advanced Web Application Firewall (WAF)/BIG-IP ASM security policy and applied to a virtual server,…

  • CVE-2021-23036HigSep 14, 2021
    F5, Inc.
    BIG-IP ASM
    risk 0.49cvss 7.5epss 0.01

    On version 16.0.x before 16.0.1.2, when a BIG-IP ASM and DataSafe profile are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not…

  • CVE-2021-23039HigSep 14, 2021
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.2.8, and all versions of 13.1.x and 12.1.x, when IPSec is configured on a BIG-IP system, undisclosed requests from an authorized remote (IPSec) peer, which already has a negotiated Security Association,…

  • CVE-2021-23035HigSep 14, 2021
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On BIG-IP 14.1.x before 14.1.4.4, when an HTTP profile is configured on a virtual server, after a specific sequence of packets, chunked responses can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support…

  • CVE-2021-23034HigSep 14, 2021
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On BIG-IP version 16.x before 16.1.0 and 15.1.x before 15.1.3.1, when a DNS profile using a DNS cache resolver is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) process to terminate. Note: Software versions which have…

  • CVE-2021-23033HigSep 14, 2021
    F5, Inc.
    BIG-IP Advanced WAF
    risk 0.49cvss 7.5epss 0.01

    On BIG-IP Advanced WAF and BIG-IP ASM version 16.x before 16.1.0x, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests can cause bd to terminate.…

  • CVE-2021-23032HigSep 14, 2021
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x, when a BIG-IP DNS system is configured with non-default Wide IP and pool settings, undisclosed DNS responses can cause the Traffic Management Microkernel (TMM)…

  • CVE-2021-23045HigSep 14, 2021
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when an SCTP profile with multiple paths is configured on a virtual server, undisclosed requests can cause the Traffic Management…

  • CVE-2021-23044HigSep 14, 2021
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, when the Intel QuickAssist Technology (QAT) compression driver is used on affected BIG-IP hardware and BIG-IP Virtual Edition (VE)…

  • CVE-2021-23042HigSep 14, 2021
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, and 12.1.x before 12.1.6, when an HTTP profile is configured on a virtual server, undisclosed requests can cause a significant increase in system resource utilization.…

  • CVE-2021-23051HigSep 14, 2021
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On BIG-IP versions 15.1.0.4 through 15.1.3, when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) driver is used with BIG-IP on Amazon Web Services (AWS) systems, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. This is due…

  • CVE-2021-23050HigSep 14, 2021
    Nginx
    NGINX App Protect
    risk 0.49cvss 7.5epss 0.00

    On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3 and NGINX App Protect on all versions before 3.5.0, when a cross-site request forgery (CSRF)-enabled policy is configured on a virtual server, an undisclosed HTML response may cause the…

  • CVE-2021-23049HigSep 14, 2021
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On BIG-IP version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3, when the iRules RESOLVER::summarize command is used on a virtual server, undisclosed requests can cause an increase in Traffic Management Microkernel (TMM) memory utilization resulting in an out-of-memory…

Page 10 of 30