BL
Product
BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator)
25
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 11Medium 13Low 0
Watch
Add BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-5542 | 8.1 | Jul 25 | F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.6, or 11.2.1-11.6.3.2 HTTPS health monitors do not validate the identity of the monitored server Affected: 13.0.0-13.0.1; 12.1.0-12.1.3.6; 11.2.1-11.6.3.2 |
| CVE-2018-15330 | 7.5 | Dec 20 | On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, when a virtual server using the inflate functionality to process a gzip bomb as a payload, the BIG-IP system will… Affected: 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, 12.1.0-12.1.3.7 |
| CVE-2018-15318 | 7.5 | Oct 31 | In BIG-IP 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, or 12.1.3.4-12.1.3.6, If an MPTCP connection receives an abort signal while the initial flow is not the primary flow, the initial… Affected: 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, 12.1.3.4-12.1.3.6 |
| CVE-2018-15319 | 7.5 | Oct 31 | On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart Affected: 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, 12.1.0-12.1.3.6 |
| CVE-2018-15320 | 7.5 | Oct 31 | On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, undisclosed traffic patterns may lead to denial of service conditions for the BIG-IP system Affected: 14.0.0-14.0.0.2, 13.0.0-13.1.1.1 |
| CVE-2018-15317 | 7.5 | Oct 31 | In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an attacker sending specially crafted SSL records to a SSL Virtual Server will cause corruption… Affected: 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, 11.2.1-11.5.6 |
| CVE-2018-5533 | 7.5 | Jul 19 | Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic Affected: 13.0.0; 12.1.0-12.1.2; 11.6.0-11.6.3.1; 11.5.0-11.5.6 |
| CVE-2018-5534 | 7.5 | Jul 19 | Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic Affected: 13.1.0-13.1.0.5; 13.0.0; 12.1.0-12.1.3.1; 11.6.0-11.6.3.1; 11.5.0-11.5.6 |
| CVE-2018-5535 | 7.5 | Jul 19 | On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed by a Virtual Server with an associated QoE profile that has… Affected: 14.0.0; 13.0.0-13.1.0; 12.1.0-12.1.3; 11.5.1-11.6.3 |
| CVE-2018-5531 | 7.4 | Jul 25 | Through undisclosed methods, on F5 BIG-IP 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.2.1-11.5.6, adjacent network attackers can cause a denial of service for VCMP… Affected: 13.0.0-13.1.0.7; 12.1.0-12.1.3.5; 11.6.0-11.6.3.1; 11.2.1-11.5.6 |
| CVE-2018-5523 | 7.2 | Jun 1 | On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 and Enterprise Manager 3.1.1, when authenticated administrative users run commands… Affected: 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, 11.2.1 |
Showing 11
