Known vulnerabilities in BIG-IP DNS 11.6.1 - page 2
Vendor:
F5 Networks
Software:
BIG-IP DNS
Version:
11.6.1
Software CPE:
cpe:2.3:h:f5_networks:big-ip_dns:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
60
Public exploits:
9
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
12.1.3.3
13.1.3.3
13.1.3.1
13.1.1.4
13.1.1.3
13.1.1.2
13.1.1.1
13.1.0.7
13.1.0.5
14.1.2.2
16.1.6
17.5.1
17.5.0
17.1.2
17.1.1.4
17.1.1.3
17.1.1.2
17.1.1.1
16.0.1.1.9.6
15.1.10.5
15.1.10.4
15.1.10.3
15.1.10.2
15.1.10.1
17.1.0
17.1.1
17.1.0.3
17.1.0.2
17.1.0.1
16.1.5
16.1.4.3
16.1.4.2
16.1.4.1
16.1.4
16.1.3.5
16.1.3.4
16.1.2.2
16.1.2.1
16.1.1
15.1.10
15.1.9.1
15.1.9
15.1.8.2
15.1.7
15.1.5.1
15.1.4.1
15.1.0.3
14.1.4.2
14.1.5.2
14.1.5.1
15.1.8
16.1.3.2
16.1.3.1
17.0.0.1
14.1.5.3
15.1.8.1
16.1.3.3
17.0.0.2
16.1.2
15.1.5
15.1.6
13.1.5
14.1.5
15.1.6.1
16.1.3
17.0.0
15.1.4
14.1.4.4
12.1.6
13.1.4
16.1.0
13.1.4.1
14.1.4.3
15.1.3.1
16.0.1.2
15.1.3
11.6.5.3
12.1.5.3
14.1.4
13.1.0.4
13.1.3.6
15.1.2.1
16.0.1.1
14.1.3.1
14.1.2.8
13.1.3.5
14.1.3
16.0.1
15.1.2
15.1.1
13.0.0 HF3
12.1.2 HF2
11.6.2 HF1
15.1.0.5
14.1.2.7
16.0.0
14.1.2-0.89.37
14.1.2.5
15.0.1.4
15.1.0.4
14.1.2.6
13.1.3.4
12.1.5.2
11.6.5.2
15.0.1.3
14.1.2.4
15.0.1.2
15.1.0.2
15.1.0.1
12.1.5.1
13.1.3.2
14.1.2.3
15.0.1.1
14.1.0.6
14.0.0.5
11.6.5.1
11.5.7
11.5.8
11.5.9
11.5.10
11.6.5
12.1.4
12.1.5
15.0.1
15.1.0
15.0.0
14.1.2.1.0.122.4-ENG Hotfix
14.1.2.1.0.115.4-ENG Hotfix
14.1.2.1.0.111.4-ENG Hotfix
14.1.2.1.0.105.4-ENG Hotfix
14.1.2.1.0.99.4-ENG Hotfix
14.1.2.1.0.97.4-ENG Hotfix
14.1.2.1.0.34.4-ENG Hotfix
14.1.2.1.0.16.4-ENG Hotfix
14.1.2.1.0.14.4-ENG Hotfix
14.1.2.1.0.46.4-ENG Hotfix
14.1.2.0.32.37-ENG Hotfix
14.1.2.0.18.37-ENG Hotfix
14.1.2.0.11.37-ENG Hotfix
14.1.0.6.0.70.9-ENG Hotfix
14.1.0.6.0.68.9-ENG Hotfix
14.1.0.6.0.14.9-ENG Hotfix
14.1.0.6.0.11.9-ENG Hotfix
14.1.0.5.0.40.5-ENG Hotfix
14.1.0.5.0.36.5-ENG Hotfix
14.1.0.5.0.15.5-ENG Hotfix
14.1.0.3.0.99.6-ENG Hotfix
14.1.0.3.0.97.6-ENG Hotfix
14.1.0.3.0.79.6-ENG Hotfix
15.0.1.0.48.11-ENG Hotfix
15.0.1.0.33.11-ENG Hotfix
13.1.1.5
14.0.1
14.0.0
14.1.2
14.1.1
14.1.0
13.1.1
14.0.1.1
14.1.2.1
13.1.3
11.6.4
13.1.0.8
13.0.0 HF1
12.1.3.2
12.1.3.4
13.1.0.6
12.1.3.1
13.0.1
11.5.6
11.5.5
11.5.4 HF4
11.6.3
12.1.3
13.1.0.3
13.1.0.2
13.1.0.1
13.1.0
11.6.0
11.5.4
11.5.3
11.5.2
11.5.1
11.5.0
11.6.1
12.0.1
11.6.2
11.4.0
11.2.1
12.1.2 HF1
13.0.0
12.0.0 HF4
12.0.0 HF3
12.0.0 HF1
12.1.2
12.0.0
12.1.1
12.1.0
Vulnerabilities (60)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU49071 - Resource Management Errors CVE-2020-27721 |
CWE-399 | Medium | 14.1.3.1, 15.1.2, 16.0.1 | 17.12.2020 |
SB2020121727 |
||
| #VU49070 - Improper input validation CVE-2020-27717 |
CWE-20 | Medium | 13.1.3.5, 14.1.3.1, 15.1.1, 16.0.1 | 17.12.2020 |
SB2020121726 |
||
| #VU49068 - Missing release of memory after effective lifetime CVE-2020-27725 |
CWE-401 | Low | 13.1.3.5, 14.1.3.1, 15.1.1 | 17.12.2020 |
SB2020121724 |
||
| #VU49058 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-5948 |
CWE-79 | Medium | 13.1.3.5, 14.1.2.8, 15.1.1, 16.0.1 | 11.12.2020 |
SB2020121719 |
||
| #VU46790 - Use After Free CVE-2020-25084 |
CWE-416 | Medium | - | 17.09.2020 |
SB2020091720 SB2020121711 |
||
| #VU46575 - Cryptographic Issues CVE-2020-5929 |
CWE-310 | Medium | 11.6.2 HF1, 11.6.3, 12.1.2 HF2, 12.1.3, 13.0.0 HF3, 13.1.0, 14.0.0 | 10.09.2020 |
SB2020091016 |
||
| #VU46573 - Exposure of sensitive information to an unauthorized actor CVE-2020-1968 |
CWE-200 | Medium | - | 10.09.2020 |
SB2020091011 SB2020121720 SB2021012078 and 22 more |
||
| #VU46077 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-5917 |
CWE-300 | Medium | 12.1.5.2, 14.1.2.4, 15.0.1.4, 15.1.0.5, 16.0.0 | 26.08.2020 |
SB2020082611 |
||
| #VU46075 - Improper input validation CVE-2020-5925 |
CWE-20 | Medium | 11.6.5.2, 12.1.5.2, 13.1.3.4, 14.1.2.7, 15.0.1.4, 15.1.0.5, 16.0.0 | 26.08.2020 |
SB2020082609 |
||
| #VU46071 - Improper Certificate Validation CVE-2020-5913 |
CWE-295 | Medium | 12.1.5.2, 14.1.2-0.89.37, 14.1.2.5, 15.1.0.2, 16.0.0 | 26.08.2020 |
SB2020082607 |
||
| #VU45985 - Out-of-bounds write CVE-2020-14364 |
CWE-787 | Medium | - | 24.08.2020 |
SB2020082410 SB2020090715 SB2020091121 and 35 more |
||
| #VU31791 - Permissions, Privileges, and Access Controls CVE-2020-5907 |
CWE-264 | Low | 11.6.5.2, 12.1.5.2, 13.1.3.4, 14.1.2.4, 15.0.1.4, 15.1.0.4 | 23.07.2020 |
SB2020070133 |
||
| #VU31790 - Incorrect Default Permissions CVE-2020-5906 |
CWE-276 | Medium | 12.1.5.2, 13.1.3.4 | 23.07.2020 |
SB2020070134 |
||
| #VU29449 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-5905 |
CWE-79 | Low | - | 02.07.2020 |
SB2020070204 |
||
| #VU29442 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-5902 |
CWE-78 | High | 11.6.5.2, 12.1.5.2, 13.1.3.4, 14.1.2.6, 15.1.0.4 | 01.07.2020 |
SB2020070120 |
||
| #VU27395 - Authentication Bypass by Spoofing CVE-2020-11868 |
CWE-290 | Low | - | 28.04.2020 |
SB2020042822 SB2020070701 SB2020071906 and 7 more |
||
| #VU21059 - Heap-based Buffer Overflow CVE-2019-5482 |
CWE-122 | Medium | 13.1.4.1, 14.1.4.2, 15.1.4, 16.0.1.2, 16.1.0 | 11.09.2019 |
SB2019091142 SB2019091143 SB2019091201 and 28 more |
||
| #VU13023 - Use After Free CVE-2018-10675 |
CWE-416 | Low | - | 28.05.2018 |
SB2017082507 SB2018111335 SB2018111336 and 11 more |
||
| #VU12853 - Improper input validation CVE-2018-1120 |
CWE-20 | Low | - | 20.05.2018 |
SB2018052205 SB2018052212 SB2018053102 and 12 more |
||
| #VU9693 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2017-10661 |
CWE-362 | Low | - | 19.12.2017 |
SB2017121510 SB2017103108 SB2017121511 and 35 more |
Showing elements 21 - 40 out of 60