CVE-2013-6016

HIGH Year: 2013
CVSS v2 Score
7.8
High
Weakness Type
CWE-20
View all →

Vulnerability Description

The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, APM, ASM, Edge Gateway, GTM, Link Controller, and WOM 10.0.0 through 10.2.2 and 11.0.0; Analytics 11.0.0; PSM 9.4.0 through 9.4.8, 10.0.0 through 10.2.4, and 11.0.0 through 11.4.1; and WebAccelerator 9.4.0 through 9.4.8, 10.0.0 through 10.2.4, and 11.0.0 through 11.3.0 might change a TCP connection to the ESTABLISHED state before receiving the ACK packet, which allows remote attackers to cause a denial of service (SIGFPE or assertion failure and TMM restart) via unspecified vectors.

Related Vulnerabilities

CVE-2015-8747

CRITICAL
CVSS:10.0(Critical)

The multifilesystem storage backend in Radicale before 1.1 allows remote attackers to read or write to arbitrary files via a crafted component name.

CWE-202015

CVE-2017-10918

CRITICAL
CVSS:10.0(Critical)

Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222.

CWE-202017

CVE-2017-16845

CRITICAL
CVSS:10.0(Critical)

hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access.

CWE-202017

CVE-2017-5226

CRITICAL
CVSS:10.0(Critical)

When executing a program via the bubblewrap sandbox, the nonpriv session can escape to the parent session by using the TIOCSTI ioctl to push characters into the terminal's input buffer, allowing an at...

CWE-202017

CVE-2017-7213

CRITICAL
CVSS:10.0(Critical)

Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected active desktops via unspecified vectors.

CWE-202017

CVE-2019-11708

CRITICAL
CVSS:10.0(Critical)

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised...

CWE-202019