IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
7.5Alta

CVE-2026-39458BIG-IP DNS Cache vulnerability

F5 BIG-IP Publicada: (hace 5 meses)

Descripción

When a BIG-IP is configured with DNS caching (Such as a DNS profile with caching enabled, SSL Orchestrator, Advanced WAF DoS protection), undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Debilidad (CWE): CWE-824

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
F5 BIG-IP 21.0.0 – < 21.0.0.1, 17.5.0 – < 17.5.1.6, 17.1.0 – < 17.1.3.2, 16.1.0
f5 big-ip access policy manager 17.1.0 – ≤ 17.1.3
f5 big-ip advanced firewall manager 17.1.0 – ≤ 17.1.3
f5 big-ip advanced web application firewall 17.1.0 – ≤ 17.1.3
f5 big-ip analytics 17.1.0 – ≤ 17.1.3
f5 big-ip application acceleration manager 17.1.0 – ≤ 17.1.3
f5 big-ip application security manager 17.1.0 – ≤ 17.1.3
f5 big-ip application visibility and reporting 17.1.0 – ≤ 17.1.3
f5 big-ip automation toolchain 17.1.0 – ≤ 17.1.3
f5 big-ip carrier-grade nat 17.1.0 – ≤ 17.1.3
f5 big-ip container ingress services 17.1.0 – ≤ 17.1.3
f5 big-ip ddos hybrid defender 17.1.0 – ≤ 17.1.3
f5 big-ip domain name system 17.1.0 – ≤ 17.1.3
f5 big-ip edge gateway 17.1.0 – ≤ 17.1.3
f5 big-ip fraud protection service 17.1.0 – ≤ 17.1.3
f5 big-ip global traffic manager 17.1.0 – ≤ 17.1.3
f5 big-ip link controller 17.1.0 – ≤ 17.1.3
f5 big-ip local traffic manager 17.1.0 – ≤ 17.1.3
f5 big-ip policy enforcement manager 17.1.0 – ≤ 17.1.3
f5 big-ip ssl orchestrator 17.1.0 – ≤ 17.1.3
f5 big-ip webaccelerator 17.1.0 – ≤ 17.1.3
f5 big-ip websafe 17.1.0 – ≤ 17.1.3

Referencias y parches

Coincidencias CPE (NVD) (60)
  • cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:* ≥ 17.1.0 ≤ 17.1.3
  • cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:* ≥ 17.5.0 ≤ 17.5.1
  • cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.6
  • cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.6
  • cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.6
  • cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.6
  • cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.6
  • cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.6
  • cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.6
  • cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.6
  • cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.6
  • cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.6
  • cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.6
  • cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.6
  • cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.6
  • cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.6
  • cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.6
  • cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.6
  • cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.6
  • cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* ≥ 16.1.0 ≤ 16.1.6

CVE recientes del mismo producto — F5 BIG-IP

9.8Crítica
CVE-2026-94127 KEV

BIG-IP APM OAuth vulnerability

F5 BIG-IP

When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). This vulnerability is only present when BIG-IP APM is configured as an OAuth Authorization Server. Dep…

27%EPSS
3.1Baja
CVE-2026-63020

BIG-IP Configuration utility vulnerability

F5 BIG-IP

A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages  Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message …

8.8Alta
CVE-2026-66842

BIG-IP and BIG-IQ Configuration utility vulnerability

F5 BIG-IP; F5 BIG-IQ

BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts through an undisclosed request to Traffic Management User Interface (TMUI). Impact: This vulnerability may allow an authenticated attack…

7.5Alta
CVE-2026-59762

BIG-IP HTTP/2 vulnerability

F5 BIG-IP; F5 BIG-IP Next for Kubernetes; F5 BIG-IP Next SPK; F5 BIG-IP Next CNF

When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.   Impact: System performance can degrade until the TMM process is either forced to restart or is manually restarted. …

7.5Alta
CVE-2026-40423

BIG-IP SIP profile vulnerability

F5 BIG-IP

When a SIP profile is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

6.8Media
CVE-2026-24464

Appliance mode iControl REST vulnerability

F5 BIG-IP

When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with administrator role privileges to cross a security boundary and delete files.  Note: Software vers…