Known vulnerabilities in BIG-IP DNS 13.0.1

Software: BIG-IP DNS
Version: 13.0.1
Software CPE: cpe:2.3:h:f5_networks:big-ip_dns:*:*:*:*:*:*:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BIG-IP DNS version 13.0.1 BIG-IP DNS 13.0.1 is affected by 12 vulnerabilities: 5 medium, 7 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU23102 - Resource exhaustion
CVE-2019-6667
CWE-400 Medium
No
No
11.6.5.1, 12.1.5, 13.1.3, 14.0.0.5, 14.1.0.6, 15.0.1.1 29.11.2019 SB2019112909
#VU22978 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2019-6663
CWE-350 Low
No
No
- 26.11.2019 SB2019112603
#VU18254 - Out-of-bounds write
CVE-2019-3863
CWE-787 Medium
No
No
- 15.04.2019 SB2019031904
SB2019041501
SB2019032002
and 20 more
#VU18025 - Integer overflow
CVE-2019-3857
CWE-190 Medium
No
No
- 19.03.2019 SB2019031904
SB2019041501
SB2019032002
and 20 more
#VU18023 - Integer overflow
CVE-2019-3856
CWE-190 Medium
No
No
- 19.03.2019 SB2019031904
SB2019041501
SB2019032002
and 20 more
#VU13524 - Improper input validation
CVE-2018-5528
CWE-20 Low
No
No
13.1.0.8 29.06.2018 SB2018062913
#VU13510 - Resource exhaustion
CVE-2018-5527
CWE-400 Low
No
No
13.1.0.8 28.06.2018 SB2018062913
#VU12333 - Exposure of sensitive information to an unauthorized actor
CVE-2018-5516
CWE-200 Low
No
No
- 02.05.2018 SB2018050209
#VU12332 - Exposure of sensitive information to an unauthorized actor
CVE-2018-5520
CWE-200 Low
No
No
- 02.05.2018 SB2018050209
#VU12331 - Improper Access Control
CVE-2018-5518
CWE-284 Low
No
No
- 02.05.2018 SB2018050209
#VU12330 - Improper Access Control
CVE-2018-5519
CWE-284 Low
No
No
- 02.05.2018 SB2018050209
#VU12329 - Improper Authentication
CVE-2018-5515
CWE-287 Medium
No
No
- 02.05.2018 SB2018050209