| Package | Affected versions | Patched versions |
|---|---|---|
| big-ip access policy manager | ≥ 12.1.0, < 12.1.4.1≥ 13.0.0, < 13.1.1.5≥ 14.0.0, < 14.0.0.5≥ 14.1.0, < 14.1.0.6 | 12.1.4.113.1.1.514.0.0.514.1.0.6 |
| big-ip advanced firewall manager | ≥ 12.1.0, < 12.1.4.1≥ 13.0.0, < 13.1.1.5≥ 14.0.0, < 14.0.0.5≥ 14.1.0, < 14.1.0.6 | 12.1.4.113.1.1.514.0.0.514.1.0.6 |
| big-ip analytics | ≥ 12.1.0, < 12.1.4.1≥ 13.0.0, < 13.1.1.5≥ 14.0.0, < 14.0.0.5≥ 14.1.0, < 14.1.0.6 | 12.1.4.113.1.1.514.0.0.514.1.0.6 |
| big-ip application acceleration manager | ≥ 12.1.0, < 12.1.4.1≥ 13.0.0, < 13.1.1.5≥ 14.0.0, < 14.0.0.5≥ 14.1.0, < 14.1.0.6 | 12.1.4.113.1.1.514.0.0.514.1.0.6 |
| big-ip application security manager | ≥ 12.1.0, < 12.1.4.1≥ 13.0.0, < 13.1.1.5≥ 14.0.0, < 14.0.0.5≥ 14.1.0, < 14.1.0.6 | 12.1.4.113.1.1.514.0.0.514.1.0.6 |
| big-ip domain name system | ≥ 12.1.0, < 12.1.4.1≥ 13.0.0, < 13.1.1.5≥ 14.0.0, < 14.0.0.5≥ 14.1.0, < 14.1.0.6 | 12.1.4.113.1.1.514.0.0.514.1.0.6 |
| big-ip edge gateway | ≥ 12.1.0, < 12.1.4.1≥ 13.0.0, < 13.1.1.5≥ 14.0.0, < 14.0.0.5≥ 14.1.0, < 14.1.0.6 | 12.1.4.113.1.1.514.0.0.514.1.0.6 |
| big-ip fraud protection service | ≥ 12.1.0, < 12.1.4.1≥ 13.0.0, < 13.1.1.5≥ 14.0.0, < 14.0.0.5≥ 14.1.0, < 14.1.0.6 | 12.1.4.113.1.1.514.0.0.514.1.0.6 |
| big-ip global traffic manager | ≥ 12.1.0, < 12.1.4.1≥ 13.0.0, < 13.1.1.5≥ 14.0.0, < 14.0.0.5≥ 14.1.0, < 14.1.0.6 | 12.1.4.113.1.1.514.0.0.514.1.0.6 |
| big-ip link controller | ≥ 12.1.0, < 12.1.4.1≥ 13.0.0, < 13.1.1.5≥ 14.0.0, < 14.0.0.5≥ 14.1.0, < 14.1.0.6 | 12.1.4.113.1.1.514.0.0.514.1.0.6 |
| big-ip local traffic manager | ≥ 12.1.0, < 12.1.4.1≥ 13.0.0, < 13.1.1.5≥ 14.0.0, < 14.0.0.5≥ 14.1.0, < 14.1.0.6 | 12.1.4.113.1.1.514.0.0.514.1.0.6 |
| big-ip policy enforcement manager | ≥ 12.1.0, < 12.1.4.1≥ 13.0.0, < 13.1.1.5≥ 14.0.0, < 14.0.0.5≥ 14.1.0, < 14.1.0.6 | 12.1.4.113.1.1.514.0.0.514.1.0.6 |
| big-ip webaccelerator | ≥ 12.1.0, < 12.1.4.1≥ 13.0.0, < 13.1.1.5≥ 14.0.0, < 14.0.0.5≥ 14.1.0, < 14.1.0.6 | 12.1.4.113.1.1.514.0.0.514.1.0.6 |
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, a high volume of malformed analytics report requests leads to instability in restjavad process. This causes issues with both iControl REST and some portions of TMUI. The attack requires an authenticated user with any role.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free