F5-K000163397: Medium severity F5 BIG-IP Next CNF vulnerability
Published Sep 23, 2026
·Updated
A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of service (DoS) or potentially other unspecified impacts.
Affected Software
6 affected componentsFixes available
F5 BIG-IP Next CNF
F5 BIG-IP Next CNF>=1.4.0<=1.4.2
1.4.3
F5 BIG-IP Next for Kubernetes=2.3.0, >=2.2.0<=2.2.2
2.3.12.2.3
F5 F5OS=2.0.0
F5 F5OS-A>=1.8.0<=1.8.4, >=1.5.1<=1.5.4
1.8.4-
F5 F5OS-C>=1.8.0<=1.8.2, >=1.6.0<=1.6.4
1.8.2-
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.4.3 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.3.12.2.3 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.8.4- - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.8.2-
Event History
Sep 23, 2026
Advisory Published
via F5·09:19 PM
Data Sourced
via F5·09:19 PM
DescriptionSeverityWeaknessAffected Software