PT-2015-7295 · F5 · F5 Big-Ip Edge Gateway+8

Publicado 2015-11-06 · Atualizado 2019-06-06 · CVE-2015-6546

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Analytics versions 11.0.0 through 11.5.x F5 BIG-IP APM versions 11.0.0 through 11.5.x F5 BIG-IP ASM versions 11.0.0 through 11.5.x F5 BIG-IP GTM versions 11.0.0 through 11.5.x F5 BIG-IP Link Controller versions 11.0.0 through 11.5.x F5 BIG-IP LTM versions 11.0.0 through 11.5.x F5 BIG-IP AAM versions 11.4.0 through 11.5.x F5 BIG-IP AFM versions 11.3.0 through 11.5.x F5 BIG-IP PEM versions 11.3.0 through 11.5.x F5 BIG-IP Edge Gateway versions 11.0.0 through 11.3.0 F5 BIG-IP WebAccelerator versions 11.0.0 through 11.3.0 F5 BIG-IP WOM versions 11.0.0 through 11.3.0 F5 BIG-IP PSM versions 11.0.0 through 11.4.1

Description The issue allows remote attackers to cause a denial of service via malicious traffic.

Recommendations For F5 BIG-IP Analytics versions 11.0.0 through 11.5.x, update to version 11.6.0 or later. For F5 BIG-IP APM versions 11.0.0 through 11.5.x, update to version 11.6.0 or later. For F5 BIG-IP ASM versions 11.0.0 through 11.5.x, update to version 11.6.0 or later. For F5 BIG-IP GTM versions 11.0.0 through 11.5.x, update to version 11.6.0 or later. For F5 BIG-IP Link Controller versions 11.0.0 through 11.5.x, update to version 11.6.0 or later. For F5 BIG-IP LTM versions 11.0.0 through 11.5.x, update to version 11.6.0 or later. For F5 BIG-IP AAM versions 11.4.0 through 11.5.x, update to version 11.6.0 or later. For F5 BIG-IP AFM versions 11.3.0 through 11.5.x, update to version 11.6.0 or later. For F5 BIG-IP PEM versions 11.3.0 through 11.5.x, update to version 11.6.0 or later. For F5 BIG-IP Edge Gateway versions 11.0.0 through 11.3.0, update to version 11.6.0 or later. For F5 BIG-IP WebAccelerator versions 11.0.0 through 11.3.0, update to version 11.6.0 or later. For F5 BIG-IP WOM versions 11.0.0 through 11.3.0, update to version 11.6.0 or later. For F5 BIG-IP PSM versions 11.0.0 through 11.4.1, update to version 11.6.0 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2015-6546

Produtos afetados

F5 Big-Ip Apm

F5 Big-Ip Analytics

F5 Big-Ip Edge Gateway

F5 Big-Ip Gtm

F5 Big-Ip Ltm

F5 Big-Ip Link Controller

F5 Big-Ip Pem

F5 Big-Ip Wom

F5 Big-Ip Webaccelerator

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-6546 · Nota de Segurança
• http://securitytracker.com/id/1033952 · Nota
• https://support.f5.com/kb/en-us/solutions/public/17000/300/sol17386.html · Aviso do Fabricante