Known vulnerabilities in BIG-IP DNS 12.0.0

Software: BIG-IP DNS
Version: 12.0.0
Software CPE: cpe:2.3:h:f5_networks:big-ip_dns:*:*:*:*:*:*:*:*
Total vulnerabilities: 19
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BIG-IP DNS version 12.0.0 BIG-IP DNS 12.0.0 is affected by 19 vulnerabilities: 5 medium, 14 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU20891 - Permissions, Privileges, and Access Controls
CVE-2019-6646
CWE-264 Medium
No
No
12.1.0 05.09.2019 SB2019080825
#VU18254 - Out-of-bounds write
CVE-2019-3863
CWE-787 Medium
No
No
- 15.04.2019 SB2019031904
SB2019041501
SB2019032002
and 20 more
#VU18025 - Integer overflow
CVE-2019-3857
CWE-190 Medium
No
No
- 19.03.2019 SB2019031904
SB2019041501
SB2019032002
and 20 more
#VU18023 - Integer overflow
CVE-2019-3856
CWE-190 Medium
No
No
- 19.03.2019 SB2019031904
SB2019041501
SB2019032002
and 20 more
#VU12843 - Data Handling
CVE-2017-6158
CWE-19 Medium
No
No
- 18.05.2018 SB2018051735
#VU12331 - Improper Access Control
CVE-2018-5518
CWE-284 Low
No
No
- 02.05.2018 SB2018050209
#VU11622 - Improper Access Control
CWE-284 Low
No
No
- 10.04.2018 SB2018041009
#VU9708 - Improper input validation
CVE-2017-6140
CWE-20 Low
No
No
- 22.12.2017 SB2017121908
#VU9522 - Double Free
CVE-2017-6166
CWE-415 Low
No
No
- 01.12.2017 SB2017110602
#VU9370 - Exposure of sensitive information to an unauthorized actor
CVE-2017-6168
CWE-200 Low
Public exploit available
No
- 17.11.2017 SB2017111703
#VU8987 - Improper input validation
CVE-2017-6162
CWE-20 Low
No
No
- 30.10.2017 SB2017103006
#VU8986 - Resource exhaustion
CVE-2017-6161
CWE-400 Low
No
No
- 30.10.2017 SB2017103006
#VU8983 - Resource exhaustion
CVE-2017-0303
CWE-400 Low
No
No
- 30.10.2017 SB2017103006
#VU8981 - Improper Access Control
CVE-2017-6159
CWE-284 Low
No
No
- 30.10.2017 SB2017103006
#VU8921 - Improper Access Control
CVE-2017-6145
CWE-284 Low
No
No
- 24.10.2017 SB2017102408
#VU8913 - Permissions, Privileges, and Access Controls
CVE-2017-6165
CWE-264 Low
No
No
- 23.10.2017 SB2017102003
#VU6531 - Permissions, Privileges, and Access Controls
CVE-2016-9250
CWE-264 Low
No
No
- 12.05.2017 SB2017051207
#VU6530 - Permissions, Privileges, and Access Controls
CVE-2016-9251
CWE-264 Low
No
No
- 12.05.2017 SB2017051206
#VU6527 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2016-9256
CWE-362 Low
No
No
- 12.05.2017 SB2017051203