Summary
Ein Angreifer kann mehrere Schwachstellen in F5 BIG-IP ausnutzen, um einen Denial of Service Angriff durchzuführen.
Product
F5 FirePass ist ein SSL-VPN Gateway der F5 Corporation. Die BIG-IP ist eine Netzwerk Appliance auf der die meisten F5 Produkte laufen.
Vulnerabilities 4
-
High 7.5
BIG-IP IPSec vulnerability
When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
-
High 7.5
BIG-IP DNS cache vulnerability
When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
-
High 7.5
BIG-IP Advanced WAF and ASM vulnerability
When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
-
Medium 6.5
BIG-IP APM and SSL Orchestrator vulnerability
When the BIG-IP system is configured as both a Security Assertion Markup Language (SAML) service provider (SP) and Identity Provider (IdP), with single logout (SLO) enabled on an access policy, undisclosed requests can cause an increase in memory resource uti…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2025-34691
-
#1
Initiale Fassung
References
-
F5 Security Advisory vom 2025-10-14
https://my.f5.com/manage/s/article/K000148816
-
F5 Security Advisory vom 2025-10-14
https://my.f5.com/manage/s/article/K000150637
-
F5 Security Advisory vom 2025-10-14
https://my.f5.com/manage/s/article/K000154664
-
F5 Security Advisory vom 2025-10-14
https://my.f5.com/manage/s/article/K000156746