CVE-2009-4420: Buffer Overflow

Published Dec 24, 2009

Updated

Buffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager (ASM) 9.4.4 through 9.4.7 and 10.0.0 through 10.0.1, and Protocol Security Manager (PSM) 9.4.5 through 9.4.7 and 10.0.0 through 10.0.1, allows remote attackers to cause a denial of service (crash) via unknown vectors. NOTE: some of these details are obtained from third party information.

Affected Software

11 affected components

F5 Big-ip Protocol Security Module=10.0.0

F5 BIG-IP Application Security Manager=9.4.4

F5 BIG-IP Application Security Manager=9.4.5

F5 BIG-IP Application Security Manager=9.4.6

F5 BIG-IP Application Security Manager=9.4.7

F5 BIG-IP Application Security Manager=10.0.0

F5 BIG-IP Application Security Manager=10.0.1

F5 Big-ip Protocol Security Manager=9.4.5

F5 Big-ip Protocol Security Manager=9.4.6

F5 Big-ip Protocol Security Manager=9.4.7

F5 Big-ip Protocol Security Manager=10.0.1

Event History

Dec 24, 2009

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-4420?

CVE-2009-4420 is classified as a critical severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2009-4420?

To fix CVE-2009-4420, upgrade your F5 BIG-IP Application Security Manager and Protocol Security Manager to the latest available versions that are not affected.

What systems are affected by CVE-2009-4420?

CVE-2009-4420 affects F5 BIG-IP Application Security Manager versions 9.4.4 to 9.4.7 and 10.0.0 to 10.0.1, and Protocol Security Manager versions 9.4.5 to 9.4.7 and 10.0.0 to 10.0.1.

What type of vulnerability is CVE-2009-4420?

CVE-2009-4420 is a buffer overflow vulnerability that can be exploited to crash services.

Who can exploit CVE-2009-4420?

CVE-2009-4420 can be exploited by remote attackers, potentially leading to service disruption.