Month: octubre 2022

Libsoup vulnerability CVE-2018-12910 Security Advisory Security Advisory Description The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via ... More info: https://support.f5.com/csp/article/K10027302?utm_source=f5support&utm_medium=RSS

Linux kernel vulnerability CVE-2022-2588 Security Advisory Security Advisory Description ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when ... More info: https://support.f5.com/csp/article/K32615023?utm_source=f5support&utm_medium=RSS

Linux kernel vulnerability CVE-2021-40490 Security Advisory Security Advisory Description A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in ... More info: https://support.f5.com/csp/article/K04712583?utm_source=f5support&utm_medium=RSS

Apache Commons Text vulnerability CVE-2022-42889 Security Advisory Security Advisory Description Apache Commons Text performs variable interpolation, allowing properties to be dynamically ... More info: https://support.f5.com/csp/article/K24823443?utm_source=f5support&utm_medium=RSS

BIND vulnerability CVE-2022-38177 Security Advisory Security Advisory Description By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a ... More info: https://support.f5.com/csp/article/K27155546?utm_source=f5support&utm_medium=RSS

NGINX ngx_http_mp4_module vulnerability CVE-2022-41741 Security Advisory Security Advisory Description NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before ... More info: https://support.f5.com/csp/article/K81926432?utm_source=f5support&utm_medium=RSS

BIG-IP and BIG-IQ iControl REST vulnerability CVE-2022-41770 Security Advisory Security Advisory Description An authenticated iControl REST user can cause an increase in memory resource ... More info: https://support.f5.com/csp/article/K22505850?utm_source=f5support&utm_medium=RSS

BIG-IP DNS Express vulnerability CVE-2022-41787 Security Advisory Security Advisory Description When the DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS ... More info: https://support.f5.com/csp/article/K70569537?utm_source=f5support&utm_medium=RSS

BIG-IP software SYN cookies vulnerability CVE-2022-36795 Security Advisory Security Advisory Description When an LTM TCP profile configured on a virtual server has the Auto Receive Window option ... More info: https://support.f5.com/csp/article/K52494562?utm_source=f5support&utm_medium=RSS

Overview of F5 vulnerabilities (October 2022) Security Advisory Security Advisory Description On October 19, 2022, F5 announced the following security issues. This document is intended to serve as ... More info: https://support.f5.com/csp/article/K30425568?utm_source=f5support&utm_medium=RSS