F5 Traffix Systems Signaling Delivery Controller vulnerabilities

2 CVEs affecting F5 Traffix Systems Signaling Delivery Controller, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-13115, published 2019-07-16.

More from F5.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-5390, published 2018-08-06. High severity, CVSS 7.5. EPSS: 71.1% chance of exploitation in the next 30 days. Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.
• CVE-2019-13115, published 2019-07-16. High severity, CVSS 8.1. EPSS: 11.7% chance of exploitation in the next 30 days. In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c has an integer overflow that could lead to an out-of-bounds read in the way packets are read from the…