F5 BIG-IP Protocol Security Manager vulnerabilities

7 CVEs affecting F5 BIG-IP Protocol Security Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-6608, published 2019-03-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-4047, published 2015-05-29. High severity, CVSS 7.8. EPSS: 9.7% chance of exploitation in the next 30 days. racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.
CVE-2009-4420, published 2009-12-24. High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days. Buffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager (ASM) 9.4.4 through 9.4.7 and 10.0.0 through 10.0.1, and Protocol Security Manager (PSM) 9.4.5 through 9.4.7 and…
CVE-2019-6603, published 2019-03-28. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. In BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, and 13.0.0-13.0.1, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control…
CVE-2019-6605, published 2019-03-28. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. On BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, and 12.0.x, an undisclosed sequence of packets received by an SSL virtual server and processed by an associated Client SSL or Server SSL profile may cause a…
CVE-2019-6606, published 2019-03-28. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. On BIG-IP 11.5.1-11.6.3.4, 12.1.0-12.1.3.7, 13.0.0-13.1.1.3, and 14.0.0-14.0.0.2, when processing certain SNMP requests with a request-id of 0, the snmpd process may leak a small amount of memory.
CVE-2019-6608, published 2019-03-28. Medium severity, CVSS 5.9. EPSS: 1% chance of exploitation in the next 30 days. On BIG-IP 11.5.1-11.6.3, 12.1.0-12.1.3, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2, under certain conditions, the snmpd daemon may leak memory on a multi-blade BIG-IP vCMP guest when processing authorized…
CVE-2019-6604, published 2019-03-28. Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days. On BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3.6, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2, under certain conditions, hardware systems with a High-Speed Bridge and using non-default Layer 2…