{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) versions 14.1.x ant\u00e9rieures \u00e0 14.1.2.1","product":{"name":"BIG-IP","vendor":{"name":"F5","scada":false}}},{"description":"BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, FPS, GTM, Link Controller, PEM) avec les deniers correctifs de type ENG Hotfix install\u00e9s ; ceux-ci sont fournis directement par le service client de F5.","product":{"name":"BIG-IP","vendor":{"name":"F5","scada":false}}},{"description":"BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) versions 14.0.x ant\u00e9rieures \u00e0 14.0.1.1","product":{"name":"BIG-IP","vendor":{"name":"F5","scada":false}}},{"description":"BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) versions 11.x ant\u00e9rieures \u00e0 11.6.5.1","product":{"name":"BIG-IP","vendor":{"name":"F5","scada":false}}},{"description":"BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) versions 15.0.x ant\u00e9rieures \u00e0 15.0.1.1","product":{"name":"BIG-IP","vendor":{"name":"F5","scada":false}}},{"description":"BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) versions 13.x ant\u00e9rieures \u00e0 13.1.3.5","product":{"name":"BIG-IP","vendor":{"name":"F5","scada":false}}},{"description":"BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) versions 12.x ant\u00e9rieures \u00e0 12.1.5","product":{"name":"BIG-IP","vendor":{"name":"F5","scada":false}}}],"affected_systems_content":null,"content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2019-6674","url":"https://www.cve.org/CVERecord?id=CVE-2019-6674"},{"name":"CVE-2019-6669","url":"https://www.cve.org/CVERecord?id=CVE-2019-6669"},{"name":"CVE-2019-6675","url":"https://www.cve.org/CVERecord?id=CVE-2019-6675"},{"name":"CVE-2019-6667","url":"https://www.cve.org/CVERecord?id=CVE-2019-6667"},{"name":"CVE-2019-6666","url":"https://www.cve.org/CVERecord?id=CVE-2019-6666"},{"name":"CVE-2019-6671","url":"https://www.cve.org/CVERecord?id=CVE-2019-6671"},{"name":"CVE-2019-6672","url":"https://www.cve.org/CVERecord?id=CVE-2019-6672"},{"name":"CVE-2018-7160","url":"https://www.cve.org/CVERecord?id=CVE-2018-7160"},{"name":"CVE-2019-6668","url":"https://www.cve.org/CVERecord?id=CVE-2019-6668"},{"name":"CVE-2019-6670","url":"https://www.cve.org/CVERecord?id=CVE-2019-6670"},{"name":"CVE-2019-6660","url":"https://www.cve.org/CVERecord?id=CVE-2019-6660"},{"name":"CVE-2019-6673","url":"https://www.cve.org/CVERecord?id=CVE-2019-6673"}],"links":[],"reference":"CERTFR-2019-AVI-593","revisions":[{"description":"Version initiale","revision_date":"2019-11-26T00:00:00.000000"},{"description":"Ajout des bulletins de s\u00e9curit\u00e9 F5 du 27 novembre 2019","revision_date":"2019-11-27T00:00:00.000000"}],"risks":[{"description":"D\u00e9ni de service \u00e0 distance"},{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans F5 BIG-IP. Elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance et un d\u00e9ni de service \u00e0 distance.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans F5 BIG-IP","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 F5 K05765031 du 27 novembre 2019","url":"https://support.f5.com/csp/article/K05765031"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 F5 K39225055 du 27 novembre 2019","url":"https://support.f5.com/csp/article/K39225055"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 F5 K63025104 du 25 novembre 2019","url":"https://support.f5.com/csp/article/K63025104"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 F5 K49827114 du 27 novembre 2019","url":"https://support.f5.com/csp/article/K49827114"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 F5 K81557381 du 27 novembre 2019","url":"https://support.f5.com/csp/article/K81557381"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 F5 K21135478 du 27 novembre 2019","url":"https://support.f5.com/csp/article/K21135478"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 F5 K11447758 du 27 novembre 2019","url":"https://support.f5.com/csp/article/K11447758"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 F5 K23860356 du 22 novembre 2019","url":"https://support.f5.com/csp/article/K23860356"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 F5 K82781208 du 27 novembre 2019","url":"https://support.f5.com/csp/article/K82781208"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 F5 K55655944 du 25 novembre 2019","url":"https://support.f5.com/csp/article/K55655944"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 F5 K14703097 du 27 novembre 2019","url":"https://support.f5.com/csp/article/K14703097"},{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 F5 K92411323 du 27 novembre 2019","url":"https://support.f5.com/csp/article/K92411323"}]}