F5 Traffix Signaling Delivery Controller vulnerabilities

31 CVEs affecting F5 Traffix Signaling Delivery Controller, 3 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-27880, published 2022-05-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-6271: GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability, published 2014-09-24. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-01-28. EPSS: 100% chance of exploitation in the next 30 days. GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment,…
CVE-2014-7169: GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability, published 2014-09-25. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-01-28. EPSS: 99.9% chance of exploitation in the next 30 days. GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or…
CVE-2018-14634: Linux Kernel Integer Overflow Vulnerability, published 2018-09-25. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2026-01-26. EPSS: 14.7% chance of exploitation in the next 30 days. An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate…
CVE-2019-11477, published 2019-06-19. High severity, CVSS 7.5. EPSS: 98.7% chance of exploitation in the next 30 days. Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker…
CVE-2019-11478, published 2019-06-19. High severity, CVSS 7.5. EPSS: 94.7% chance of exploitation in the next 30 days. Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK)…
CVE-2019-11479, published 2019-06-19. High severity, CVSS 7.5. EPSS: 91.7% chance of exploitation in the next 30 days. Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced.…
CVE-2019-5436, published 2019-05-28. High severity, CVSS 7.8. EPSS: 49.7% chance of exploitation in the next 30 days. A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.
CVE-2002-20001, published 2021-11-11. High severity, CVSS 7.5. EPSS: 24.6% chance of exploitation in the next 30 days. The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE…
CVE-2019-1559, published 2019-02-27. Medium severity, CVSS 5.9. EPSS: 17.1% chance of exploitation in the next 30 days. If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling…
CVE-2018-1320, published 2019-01-07. High severity, CVSS 7.5. EPSS: 8.2% chance of exploitation in the next 30 days. Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine…

Latest

CVE-2022-27880, published 2022-05-05. Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days. On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35, a stored Cross-Site Scripting (XSS) vulnerability exists in an undisclosed page of the Traffix SDC Configuration…
CVE-2022-27662, published 2022-05-05. Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days. On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35, a stored Cross-Site Template Injection vulnerability exists in an undisclosed page of the Traffix SDC Configuration…
CVE-2020-5854, published 2020-02-06. Medium severity, CVSS 5.9. EPSS: 0.8% chance of exploitation in the next 30 days. On BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.0-11.6.5.1, the tmm crashes under certain circumstances when using the connector profile if a…
CVE-2018-16229, published 2019-10-03. High severity, CVSS 7.5. EPSS: 6.8% chance of exploitation in the next 30 days. The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option().
CVE-2018-14882, published 2019-10-03. High severity, CVSS 7.5. EPSS: 3.9% chance of exploitation in the next 30 days. The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c.
CVE-2018-14880, published 2019-10-03. High severity, CVSS 7.5. EPSS: 5.3% chance of exploitation in the next 30 days. The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
CVE-2018-14879, published 2019-10-03. High severity, CVSS 7.0. EPSS: 4.7% chance of exploitation in the next 30 days. The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().
CVE-2018-14469, published 2019-10-03. High severity, CVSS 7.5. EPSS: 5.3% chance of exploitation in the next 30 days. The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print().
CVE-2018-14468, published 2019-10-03. High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days. The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().