CERT-In warns users of vulnerability in cybersecurity firm F5 product


New Delhi, April 5 (IANS): The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics & Information Technology (MeitY), on Friday warned users of a vulnerability in multi-cloud application services and security company F5's BIG-IP (a family of products covering software and hardware).

According to the cyber agency, this vulnerability could be exploited by a remote attacker to execute craft DNS queries or cause a Denial of Service (DoS) condition on the targeted system.

"Vulnerability exists in F5 BIG-IP due to flooding the target server with queries. A remote attacker could exploit this vulnerability by crafting queries on the affected 'named' instance and responses may cause excessive CPU load on the targeted system," said CERT-In in the advisory.

"Successful exploitation of this vulnerability could allow a remote attacker to execute craft DNS queries or cause a Denial of Service condition on the targeted system," it added.

The cyber agency has advised to apply the appropriate updates.

Meanwhile, CERT-In has warned users of multiple vulnerabilities in Android and Mozilla Firefox web browsers which could allow an attacker to obtain sensitive information, execute arbitrary code and cause Denial-of-Service conditions on the targeted system.

As per the advisory, 'Android 12, 12L, 13, 14', and 'Mozilla Firefox versions prior to 124.0.1 and Mozilla Firefox ESR versions before 115.9.1' are the affected software versions, respectively.

 

  

Top Stories


Leave a Comment

Title: CERT-In warns users of vulnerability in cybersecurity firm F5 product



You have 2000 characters left.

Disclaimer:

Please write your correct name and email address. Kindly do not post any personal, abusive, defamatory, infringing, obscene, indecent, discriminatory or unlawful or similar comments. Daijiworld.com will not be responsible for any defamatory message posted under this article.

Please note that sending false messages to insult, defame, intimidate, mislead or deceive people or to intentionally cause public disorder is punishable under law. It is obligatory on Daijiworld to provide the IP address and other details of senders of such comments, to the authority concerned upon request.

Hence, sending offensive comments using daijiworld will be purely at your own risk, and in no way will Daijiworld.com be held responsible.