Vulnerabilities > F5 > BIG IP Domain Name System > 11.2.1
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2018-04-13 | CVE-2017-6158 | Unspecified vulnerability in F5 products In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling of invalid IP addresses. | 6.5 |
2018-04-13 | CVE-2017-6156 | Unspecified vulnerability in F5 products When the F5 BIG-IP 12.1.0-12.1.1, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 system is configured with a wildcard IPSec tunnel endpoint, it may allow a remote attacker to disrupt or impersonate the tunnels that have completed phase 1 IPSec negotiations. | 6.4 |
2017-10-27 | CVE-2017-6161 | Resource Exhaustion vulnerability in F5 products In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1, when ConfigSync is configured, attackers on adjacent networks may be able to bypass the TLS protections usually used to encrypted and authenticate connections to mcpd. | 5.3 |