Vulnerabilities > F5 > BIG IP Advanced Firewall Manager > 14.1.2.8

DATE CVE VULNERABILITY TITLE RISK
2020-12-24 CVE-2020-27715 Unspecified vulnerability in F5 products
On BIG-IP 15.1.0-15.1.0.5 and 14.1.0-14.1.3, crafted TLS request to the BIG-IP management interface via port 443 can cause high (~100%) CPU utilization by the httpd daemon.
network
low complexity
f5
7.5
2020-12-24 CVE-2020-27714 Unspecified vulnerability in F5 Big-Ip Advanced Firewall Manager
On the BIG-IP AFM version 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5, when a Protocol Inspection Profile is attached to a FastL4 virtual server with the protocol field configured to either Other or All Protocols, the TMM may experience a restart if the profile processes non-TCP traffic.
network
low complexity
f5
7.5
2018-07-06 CVE-2018-13405 Improper Privilege Management vulnerability in multiple products
The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group.
7.8