| Package | Affected versions | Patched versions |
|---|---|---|
| big-ip access policy manager | ≥ 11.6.1, ≤ 11.6.5.1≥ 12.1.0, ≤ 12.1.5.1≥ 13.1.0, ≤ 13.1.3.3≥ 14.1.0, ≤ 14.1.2.5≥ 15.0.0, ≤ 15.1.0.3 | |
| big-ip access policy manager client | ≥ 7.1.5, ≤ 7.1.9 |
In versions 7.1.5-7.1.9, BIG-IP Edge Client Windows Stonewall driver does not sanitize the pointer received from the userland. A local user on the Windows client system can send crafted DeviceIoControl requests to \\.\urvpndrv device causing the Windows kernel to crash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free