F5

Big-ip Domain Name System

387 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2021-22982

  • EPSS 0.43%
  • Published 12.02.2021 18:15:12
  • Last modified 21.11.2024 05:51:03

On BIG-IP DNS and GTM version 13.1.x before 13.1.0.4, and all versions of 12.1.x and 11.6.x, big3d does not securely handle and parse certain payloads resulting in a buffer overflow. Note: Software versions which have reached End of Software Developm...

7.5

CVE-2021-22973

  • EPSS 0.65%
  • Published 12.02.2021 17:15:14
  • Last modified 21.11.2024 05:51:02

On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12.1.x versions, JSON parser function does not protect against out-of-bounds memory accesses or writes. Note: Software versions wh...

7.5

CVE-2021-22974

  • EPSS 0.33%
  • Published 12.02.2021 17:15:14
  • Last modified 21.11.2024 05:51:02

On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6 and all versions of BIG-IQ 7.x and 6.x, an authenticated attacker with access to iControl REST over the control plane may be able to ta...

7.5

CVE-2021-22975

  • EPSS 0.65%
  • Published 12.02.2021 17:15:14
  • Last modified 21.11.2024 05:51:03

On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, and 14.1.x before 14.1.3.1, under some circumstances, Traffic Management Microkernel (TMM) may restart on the BIG-IP system while passing large bursts of traffic. Note: Software versio...

6.1

CVE-2020-27719

  • EPSS 0.47%
  • Published 24.12.2020 16:15:15
  • Last modified 21.11.2024 05:21:41

On BIG-IP 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, a cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility.

4.9

CVE-2020-27727

  • EPSS 0.27%
  • Published 24.12.2020 16:15:15
  • Last modified 21.11.2024 05:21:42

On BIG-IP version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, when an authenticated administrative user installs RPMs using the iAppsLX REST installer, the BIG-IP system does not sufficiently validate user input, allowing th...

7.8

CVE-2020-27715

  • EPSS 0.61%
  • Published 24.12.2020 16:15:14
  • Last modified 21.11.2024 05:21:40

On BIG-IP 15.1.0-15.1.0.5 and 14.1.0-14.1.3, crafted TLS request to the BIG-IP management interface via port 443 can cause high (~100%) CPU utilization by the httpd daemon.

7.8

CVE-2020-27717

  • EPSS 0.92%
  • Published 24.12.2020 16:15:14
  • Last modified 21.11.2024 05:21:41

On BIG-IP DNS 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.2, undisclosed series of DNS requests may cause TMM to restart and generate a core file.

7.5

CVE-2020-27721

  • EPSS 0.65%
  • Published 24.12.2020 15:15:12
  • Last modified 21.11.2024 05:21:41

In versions 16.0.0-16.0.0.1, 15.1.0-15.1.1, 14.1.0-14.1.3, 13.1.0-13.1.3.5, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, in a BIG-IP DNS / BIG-IP LTM GSLB deployment, under certain circumstances, the BIG-IP DNS system may stop using a BIG-IP LTM virtual ser...

4.3

CVE-2020-27725

  • EPSS 0.3%
  • Published 24.12.2020 15:15:12
  • Last modified 21.11.2024 05:21:42

In version 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2 of BIG-IP DNS, GTM, and Link Controller, zxfrd leaks memory when listing DNS zones. Zones can be listed via TMSH, iControl or SNMP; only users with acces...