CVE-2009-4420 Memory corruption in n/a

What is CVE-2009-4420?

CVE-2009-4420 is a high-severity memory corruption vulnerability in F5 Big-Ip Application Security Manager, published on 24 Dec 2009. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Buffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager (ASM) 9.4.4 through 9.4.7 and 10.0.0 through 10.0.1, and Protocol Security Manager (PSM) 9.4.5 through 9.4.7 and 10.0.0 through 10.0.1, allows remote attackers to cause a denial of service (crash) via unknown vectors. NOTE: some of these details are obtained from third party information.

Weakness: CWE-119

Which versions are affected by CVE-2009-4420?

It affects 3 products.

Products include F5 Big-Ip Application Security Manager, F5 Big-Ip Protocol Security Manager, F5 Big-Ip Protocol Security Module.

How do I fix CVE-2009-4420?

No fix has been published for CVE-2009-4420 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2009-4420 being exploited?

There is no known exploitation of CVE-2009-4420 in the wild and no public exploit code.

Other vulnerabilities in F5 Big-Ip Application Security Manager

• CVE-2019-6665 Other in BIG-IP ASM Critical 9.4
• CVE-2019-6650 Information disclosure in BIG-IP ASM Critical 9.1
• CVE-2025-24326 BIG-IP Advanced WAF/ASM BADoS vulnerability High 8.9
• CVE-2025-55669 BIG-IP HTTP/2 vulnerability High 8.7
• CVE-2021-23010 Denial of service in BIG-IP ASM/Advanced WAF High 7.5

All F5 Big-Ip Application Security Manager vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-jggw-46hj-wcq8.