| Package | Affected versions | Patched versions |
|---|---|---|
| big-ip access policy manager | ≥ 11.1.0, ≤ 11.5.3 | |
| big-ip advanced firewall manager | ≥ 11.3.0, ≤ 11.5.3 | |
| big-ip analytics | ≥ 11.1.0, ≤ 11.5.3 | |
| big-ip application acceleration manager | ≥ 11.4.0, ≤ 11.5.3 | |
| big-ip application security manager | ≥ 11.1.0, ≤ 11.5.3 | |
| big-ip edge gateway | ≥ 11.1.0, ≤ 11.3.0 | |
| big-ip enterprise manager | ≥ 2.1.0, ≤ 2.3.0≥ 3.0.0, ≤ 3.1.1 | |
| big-ip global traffic manager | ≥ 11.1.0, ≤ 11.5.3 | |
| big-ip link controller | ≥ 11.1.0, ≤ 11.5.3 | |
| big-ip local traffic manager | ≥ 11.1.0, ≤ 11.5.3 | |
| big-ip policy enforcement manager | ≥ 11.3.0, ≤ 11.5.3 | |
| big-ip protocol security module | ≥ 11.1.0, ≤ 11.4.1 | |
| big-ip wan optimization manager | ≥ 11.1.0, ≤ 11.3.0 | |
| big-ip webaccelerator | ≥ 11.1.0, ≤ 11.3.0 | |
| big-iq adc | = 4.5.0 | |
| big-iq centralized management | = 4.6.0 | |
| big-iq cloud | ≥ 4.0.0, ≤ 4.5.0 | |
| big-iq device | ≥ 4.2.0, ≤ 4.5.0 | |
| big-iq security | ≥ 4.0.0, ≤ 4.5.0 |
The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an SCTP handshake with a modified INIT chunk and a crafted AUTH chunk before a COOKIE_ECHO chunk.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free