Latest f5 big-ip next service proxy for kubernetes Vulnerabilities

● CVE-2023-45886

The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed attribute.

Microsoft .NET 7.0=20.0.1

F5 Big-ip Next Service Proxy For Kubernetes>=1.5.0<=1.8.2

F5 Big-ip Next Cloud-native Network Functions>=1.1.0<=1.1.1

F5 Big-ip Local Traffic Manager>=13.1.0<=13.1.5

F5 Big-ip Local Traffic Manager>=14.1.0<=14.1.5

F5 Big-ip Local Traffic Manager>=15.1.0<=15.1.10

and 8 more

● CVE-2023-45226

The BIG-IP SPK TMM (Traffic Management Module) f5-debug-sidecar and f5-debug-sshd containers contains hardcoded credentials that may allow an attacker with the ability to intercept traffic to imperso...

F5 Big-ip Next Service Proxy For Kubernetes=1.5.0

● CVE-2023-40534

When a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, and an iRule using the HTTP_REQUEST event or Local Traffic Policy are associated with the virtual ser...

F5 BIG-IP Access Policy Manager>=16.1.0<16.1.4.1

F5 BIG-IP Access Policy Manager=17.1.0

F5 BIG-IP Advanced Firewall Manager>=16.1.0<16.1.4.1

F5 BIG-IP Advanced Firewall Manager=17.1.0

F5 Big-ip Advanced Web Application Firewall>=16.1.0<16.1.4.1

F5 Big-ip Advanced Web Application Firewall=17.1.0

and 33 more

● CVE-2023-44487

- Rapid Reset HTTP/2 vulnerability

Microsoft Windows 11=21H2

Microsoft Windows Server 2022

Microsoft Windows 11=22H2

and 553 more

● CVE-2023-24594

When an SSL profile is configured on a Virtual Server, undisclosed traffic can cause an increase in CPU or SSL accelerator resource utilization. Note: Software versions which have reached End of T...

F5 BIG-IP Access Policy Manager=14.1.5

F5 BIG-IP Access Policy Manager=15.1.4.1

F5 BIG-IP Access Policy Manager=16.1.2

F5 BIG-IP Advanced Firewall Manager=14.1.5

F5 BIG-IP Advanced Firewall Manager=15.1.4.1

F5 BIG-IP Advanced Firewall Manager=16.1.2

and 52 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.