Traffix Signaling Delivery Controller (F5) - vulnerabilities (CVEs)

31 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2022-05-05. Vendor: F5.

CVEs of Traffix Signaling Delivery Controller

• CVE-2022-27880 - CVSS 4.8 (medium), 2022-05-05: On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35, a stored Cross-Site Scripting (XSS) vulnerability exists in an undisclosed…
• CVE-2022-27662 - CVSS 4.8 (medium), 2022-05-05: On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35, a stored Cross-Site Template Injection vulnerability exists in an…
• CVE-2002-20001 - CVSS 7.5 (high), 2021-11-11: The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and…
• CVE-2020-5854 - CVSS 5.9 (medium), 2020-02-06: On BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.0-11.6.5.1, the tmm crashes under certain circumstances…
• CVE-2018-14882 - CVSS 9.8 (critical), 2019-10-03: The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.
• CVE-2018-14880 - CVSS 7.5 (high), 2019-10-03: The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
• CVE-2018-14879 - CVSS 7 (high), 2019-10-03: The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().
• CVE-2018-16229 - CVSS 7.5 (high), 2019-10-03: The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option().
• CVE-2018-14463 - CVSS 7.5 (high), 2019-10-03: The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167.
• CVE-2018-14469 - CVSS 7.5 (high), 2019-10-03: The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().
• CVE-2018-14462 - CVSS 7.5 (high), 2019-10-03: The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print().
• CVE-2018-14468 - CVSS 7.5 (high), 2019-10-03: The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().
• CVE-2018-14465 - CVSS 7.5 (high), 2019-10-03: The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print().
• CVE-2019-16714 - CVSS 7.5 (high), 2019-09-23: In the Linux kernel before 5.2.14, rds6_inc_info_copy in net/rds/recv.c allows attackers to obtain sensitive information from kernel stack memory because tos…
• CVE-2019-13565 - CVSS 7.5 (high), 2019-07-26: An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session encryption, and relying on the SASL security layers in slapd…
• CVE-2019-13050 - CVSS 7.5 (high), 2019-06-29: Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver…
• CVE-2019-11477 - CVSS 7.5 (high), 2019-06-19: Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective…
• CVE-2019-11479 - CVSS 7.5 (high), 2019-06-19: Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly…
• CVE-2019-11478 - CVSS 7.5 (high), 2019-06-19: Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP…
• CVE-2019-5436 - CVSS 7.8 (high), 2019-05-28: A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
• CVE-2018-20836 - CVSS 8.1 (high), 2019-05-07: An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in…
• CVE-2019-1559 - CVSS 5.9 (medium), 2019-02-27: If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL…
• CVE-2019-9077 - CVSS 7.8 (high), 2019-02-24: An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS option section.
• CVE-2019-9070 - CVSS 7.8 (high), 2019-02-24: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d_expression_1 in cp-demangle.c after…
• CVE-2018-1320 - CVSS 7.5 (high), 2019-01-07: Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the…
• CVE-2018-20657 - CVSS 7.5 (high), 2019-01-02: The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a…
• CVE-2018-20002 - CVSS 5.5 (medium), 2018-12-10: The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a…
• CVE-2018-14634 - CVSS 7.8 (high), 2018-09-25: An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise…
• CVE-2015-5738 - CVSS 7.5 (high), 2016-07-26: The RSA-CRT implementation in the Cavium Software Development Kit (SDK) 2.x, when used on OCTEON II CN6xxx Hardware on Linux to support TLS with Perfect…
• CVE-2014-7169 - CVSS 9.8 (critical), 2014-09-25: GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows…
• CVE-2014-6271 - CVSS 9.8 (critical), 2014-09-24: GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute…