| Package | Affected versions | Patched versions |
|---|---|---|
| big-ip access policy manager | = 15.1.0≥ 12.1.3.6, < 12.1.5.3≥ 13.1.1.2, < 13.1.3.5≥ 14.0.0.3, ≤ 14.0.1≥ 14.1.0, < 14.1.2.8≥ 15.0.0, ≤ 15.0.1 | 12.1.5.313.1.3.514.1.2.8 |
| big-ip advanced firewall manager | = 15.1.0≥ 12.1.3.6, < 12.1.5.3≥ 13.1.1.2, < 13.1.3.5≥ 14.0.0.3, ≤ 14.0.1≥ 14.1.0, < 14.1.2.8≥ 15.0.0, ≤ 15.0.1 | 12.1.5.313.1.3.514.1.2.8 |
| big-ip analytics | = 15.1.0≥ 12.1.3.6, < 12.1.5.3≥ 13.1.1.2, < 13.1.3.5≥ 14.0.0.3, ≤ 14.0.1≥ 14.1.0, < 14.1.2.8≥ 15.0.0, ≤ 15.0.1 | 12.1.5.313.1.3.514.1.2.8 |
| big-ip application acceleration manager | = 15.1.0≥ 12.1.3.6, < 12.1.5.3≥ 13.1.1.2, < 13.1.3.5≥ 14.0.0.3, ≤ 14.0.1≥ 14.1.0, < 14.1.2.8≥ 15.0.0, ≤ 15.0.1 | 12.1.5.313.1.3.514.1.2.8 |
| big-ip application security manager | = 15.1.0≥ 12.1.3.6, < 12.1.5.3≥ 13.1.1.2, < 13.1.3.5≥ 14.0.0.3, ≤ 14.0.1≥ 15.0.0, ≤ 15.0.1 | 12.1.5.313.1.3.5 |
| big-ip domain name system | = 15.1.0≥ 12.1.3.6, < 12.1.5.3≥ 13.1.1.2, < 13.1.3.5≥ 14.0.0.3, ≤ 14.0.1≥ 14.1.0, < 14.1.2.8≥ 15.0.0, ≤ 15.0.1 | 12.1.5.313.1.3.514.1.2.8 |
| big-ip edge gateway | = 15.1.0≥ 12.1.3.6, < 12.1.5.3≥ 13.1.1.2, < 13.1.3.5≥ 14.0.0.3, ≤ 14.0.1≥ 14.1.0, < 14.1.2≥ 15.0.0, ≤ 15.0.1 | 12.1.5.313.1.3.514.1.2 |
| big-ip fraud protection service | = 15.1.0≥ 12.1.3.6, < 12.1.5.3≥ 13.1.1.2, < 13.1.3.5≥ 14.0.0.3, ≤ 14.0.1≥ 14.1.0, < 14.1.2≥ 15.0.0, ≤ 15.0.1 | 12.1.5.313.1.3.514.1.2 |
| big-ip global traffic manager | = 15.1.0≥ 12.1.3.6, < 12.1.5.3≥ 13.1.1.2, < 13.1.3.5≥ 14.0.0.3, ≤ 14.0.1≥ 14.1.0, < 14.1.2.8≥ 15.0.0, ≤ 15.0.1 | 12.1.5.313.1.3.514.1.2.8 |
| big-ip link controller | = 15.1.0≥ 12.1.3.6, < 12.1.5.3≥ 13.1.1.2, < 13.1.3.5≥ 14.0.0.3, ≤ 14.0.1≥ 14.1.0, < 14.1.2.8≥ 15.0.0, ≤ 15.0.1 | 12.1.5.313.1.3.514.1.2.8 |
| big-ip local traffic manager | = 15.1.0≥ 12.1.3.6, < 12.1.5.3≥ 13.1.1.2, < 13.1.3.5≥ 14.0.0.3, ≤ 14.0.1≥ 14.1.0, < 14.1.2.8≥ 15.0.0, ≤ 15.0.1 | 12.1.5.313.1.3.514.1.2.8 |
| big-ip policy enforcement manager | = 15.1.0≥ 12.1.3.6, < 12.1.5.3≥ 13.1.1.2, < 13.1.3.5≥ 14.0.0.3, ≤ 14.0.1≥ 14.1.0, < 14.1.2.8≥ 15.0.0, ≤ 15.0.1 | 12.1.5.313.1.3.514.1.2.8 |
| big-ip webaccelerator | = 15.1.0≥ 12.1.3.6, < 12.1.5.3≥ 13.1.1.2, < 13.1.3.5≥ 14.0.0.3, ≤ 14.0.1≥ 14.1.0, < 14.1.2.8≥ 15.0.0, ≤ 15.0.1 | 12.1.5.313.1.3.514.1.2.8 |
| wireshark | ≥ 2.4.0, ≤ 2.4.14≥ 2.6.0, ≤ 2.6.8≥ 3.0.0, ≤ 3.0.1 |
In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash. This was addressed in epan/packet.c by restricting the number of layers and consequently limiting recursion.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free