[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fafu6jyIpIg-5qkr0MfzAp-e8QunGU27MPBSdJJhkLyU":3,"g5a-family:f5\u002Ftraffix_signaling_delivery_controller":141,"g5a-ex:f5\u002Ftraffix_signaling_delivery_controller@*":142},{"success":4,"data":5},true,{"product":6,"versions":41,"topVulnerabilitiesByEpss":53,"kevVulnerabilities":111,"seoMetadata":119,"meta":138},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":40},"f5","traffix_signaling_delivery_controller",11,30,2,"2022-05-05",[14,16,18,20,24,26,28,30,33,35,38],{"version":15,"cve_count":11,"kev_count":11,"has_kev":4},"3.3.2",{"version":17,"cve_count":11,"kev_count":11,"has_kev":4},"3.4.1",{"version":19,"cve_count":11,"kev_count":11,"has_kev":4},"3.5.1",{"version":21,"cve_count":22,"kev_count":22,"has_kev":23},"4.0.0",0,false,{"version":25,"cve_count":22,"kev_count":22,"has_kev":23},"4.0.2",{"version":27,"cve_count":22,"kev_count":22,"has_kev":23},"4.0.5",{"version":29,"cve_count":11,"kev_count":11,"has_kev":4},"4.1.0",{"version":31,"cve_count":32,"kev_count":22,"has_kev":23},"4.4.0",3,{"version":34,"cve_count":11,"kev_count":22,"has_kev":23},"5.0.0",{"version":36,"cve_count":37,"kev_count":22,"has_kev":23},"5.1.0",5,{"version":39,"cve_count":32,"kev_count":22,"has_kev":23},"5.2.0","Traffix Signaling Delivery Controller by F5 is a technology product with 11 tracked versions and 30 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[42,43,44,45,46,47,48,49,50,51,52],{"version":15,"cve_count":11,"kev_count":11,"has_kev":4},{"version":17,"cve_count":11,"kev_count":11,"has_kev":4},{"version":19,"cve_count":11,"kev_count":11,"has_kev":4},{"version":21,"cve_count":22,"kev_count":22,"has_kev":23},{"version":25,"cve_count":22,"kev_count":22,"has_kev":23},{"version":27,"cve_count":22,"kev_count":22,"has_kev":23},{"version":29,"cve_count":11,"kev_count":11,"has_kev":4},{"version":31,"cve_count":32,"kev_count":22,"has_kev":23},{"version":34,"cve_count":11,"kev_count":22,"has_kev":23},{"version":36,"cve_count":37,"kev_count":22,"has_kev":23},{"version":39,"cve_count":32,"kev_count":22,"has_kev":23},[54,62,67,74,79,83,89,94,101,106],{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":4,"epssScore":61},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,"v3.1","Critical",0.99999,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":4,"epssScore":66},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25",0.9994,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":59,"severity":72,"isKev":23,"epssScore":73},"CVE-2019-11477","Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff.","2019-06-19",7.5,"High",0.98745,{"cveId":75,"description":76,"publishedDate":70,"cvssScore":71,"cvssVersion":77,"severity":72,"isKev":23,"epssScore":78},"CVE-2019-11478","Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit f070ef2ac66716357066b683fb0baf55f8191a2e.","v3.0",0.94686,{"cveId":80,"description":81,"publishedDate":70,"cvssScore":71,"cvssVersion":59,"severity":72,"isKev":23,"epssScore":82},"CVE-2019-11479","Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commits 967c05aee439e6e5d7d805e195b3a20ef5c433d6 and 5f3e2bf008c2221478101ee72f5cb4654b9fc363.",0.9166,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":87,"cvssVersion":59,"severity":72,"isKev":23,"epssScore":88},"CVE-2019-5436","A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.","2019-05-28",7.8,0.49739,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":71,"cvssVersion":59,"severity":72,"isKev":23,"epssScore":93},"CVE-2002-20001","The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.","2021-11-11",0.24639,{"cveId":95,"description":96,"publishedDate":97,"cvssScore":98,"cvssVersion":59,"severity":99,"isKev":23,"epssScore":100},"CVE-2019-1559","If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).","2019-02-27",5.9,"Medium",0.17139,{"cveId":102,"description":103,"publishedDate":104,"cvssScore":71,"cvssVersion":59,"severity":72,"isKev":23,"epssScore":105},"CVE-2018-1320","Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.","2019-01-07",0.08188,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":71,"cvssVersion":59,"severity":72,"isKev":23,"epssScore":110},"CVE-2018-16229","The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option().","2019-10-03",0.06816,[112,117],{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"severity":60,"isKev":4,"epssScore":61,"cisaVulnName":113,"cisaDateAdded":114,"cisaShortDescription":115,"cisaRequiredAction":116},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","2022-01-28","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.","Apply updates per vendor instructions.",{"cveId":63,"description":64,"publishedDate":65,"cvssScore":58,"severity":60,"isKev":4,"epssScore":66,"cisaVulnName":113,"cisaDateAdded":114,"cisaShortDescription":118,"cisaRequiredAction":116},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"title":120,"metaDescription":121,"keywords":122,"structuredData":123},"Traffix Signaling Delivery Controller by F5 - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Traffix Signaling Delivery Controller by F5 covering 11 versions with 30 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Traffix Signaling Delivery Controller vulnerabilities, Traffix Signaling Delivery Controller security, Traffix Signaling Delivery Controller CVE, F5 Traffix Signaling Delivery Controller, Traffix Signaling Delivery Controller threat intelligence, F5 security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Traffix Signaling Delivery Controller KEV, Traffix Signaling Delivery Controller exploited vulnerabilities",{"@context":124,"@type":125,"name":126,"description":121,"url":127,"manufacturer":128,"applicationCategory":132,"softwareVersion":133,"mainEntity":134},"https:\u002F\u002Fschema.org","SoftwareApplication","Traffix Signaling Delivery Controller","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ff5\u002Ftraffix_signaling_delivery_controller",{"@type":129,"name":130,"url":131},"Organization","F5","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ff5","Security Software","11 versions tracked",{"@type":135,"name":136,"description":137,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Traffix Signaling Delivery Controller Security Vulnerabilities","Security vulnerabilities affecting Traffix Signaling Delivery Controller by F5",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":139,"apiVersion":140},"2026-10-17T15:26:24.823Z","3.0",[],{"rows":143,"total":11,"capped":23,"failed":22},[144,149],{"cveId":55,"name":113,"severity":60,"cvss":58,"added":114,"epss":61,"published":145,"ranges":146,"checked":4,"hits":148,"covers":23},"2014-09-24T18:48:04.477",[15,17,19,147,29],"4.0.0 to 4.0.5",[],{"cveId":63,"name":113,"severity":60,"cvss":58,"added":114,"epss":66,"published":150,"ranges":151,"checked":4,"hits":152,"covers":23},"2014-09-25T01:55:04.367",[15,17,19,147,29],[]]