Blog

Ruby vulnerabilities CVE-2019-8322 CVE-2019-8323 CVE-2019-8324 CVE-2019-8325 Security Advisory Security Advisory Description CVE-2019-8322 An issue was discovered in RubyGems 2.6 and later through ... More info: https://support.f5.com/csp/article/K81674333?utm_source=f5support&utm_medium=RSS

Tcpdump vulnerability CVE-2018-19519 Security Advisory Security Advisory Description In tcpdump 4.9.2, a stack-based buffer over-read exists in the print_prefix function of print-hncp.c via ... More info: https://support.f5.com/csp/article/K04311751?utm_source=f5support&utm_medium=RSS

Libsoup vulnerability CVE-2018-12910 Security Advisory Security Advisory Description The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via ... More info: https://support.f5.com/csp/article/K10027302?utm_source=f5support&utm_medium=RSS

Linux kernel vulnerability CVE-2022-2588 Security Advisory Security Advisory Description ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when ... More info: https://support.f5.com/csp/article/K32615023?utm_source=f5support&utm_medium=RSS

Linux kernel vulnerability CVE-2021-40490 Security Advisory Security Advisory Description A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in ... More info: https://support.f5.com/csp/article/K04712583?utm_source=f5support&utm_medium=RSS

Apache Commons Text vulnerability CVE-2022-42889 Security Advisory Security Advisory Description Apache Commons Text performs variable interpolation, allowing properties to be dynamically ... More info: https://support.f5.com/csp/article/K24823443?utm_source=f5support&utm_medium=RSS

BIND vulnerability CVE-2022-38177 Security Advisory Security Advisory Description By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a ... More info: https://support.f5.com/csp/article/K27155546?utm_source=f5support&utm_medium=RSS

NGINX ngx_http_mp4_module vulnerability CVE-2022-41741 Security Advisory Security Advisory Description NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before ... More info: https://support.f5.com/csp/article/K81926432?utm_source=f5support&utm_medium=RSS

BIG-IP and BIG-IQ iControl REST vulnerability CVE-2022-41770 Security Advisory Security Advisory Description An authenticated iControl REST user can cause an increase in memory resource ... More info: https://support.f5.com/csp/article/K22505850?utm_source=f5support&utm_medium=RSS

BIG-IP DNS Express vulnerability CVE-2022-41787 Security Advisory Security Advisory Description When the DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS ... More info: https://support.f5.com/csp/article/K70569537?utm_source=f5support&utm_medium=RSS