PT-2018-12961 · F5 · F5 Big-Ip

Publicado 2018-10-31 · Atualizado 2019-10-03 · CVE-2018-15317

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.2.1 through 11.6.3.2 F5 BIG-IP versions 12.1.0 through 12.1.4.1 F5 BIG-IP versions 13.0.0 through 13.1.1.5 F5 BIG-IP versions 14.0.0 through 14.0.0.2

Description The issue arises when an attacker sends specially crafted SSL records to an SSL Virtual Server, causing corruption in the SSL data structures. This leads to intermittent decrypt BAD RECORD MAC errors, preventing clients from accessing the application load balanced by a virtual server with an SSL profile until the tmm is restarted.

Recommendations For F5 BIG-IP versions 11.2.1 through 11.6.3.2, restart the tmm to resolve the issue. For F5 BIG-IP versions 12.1.0 through 12.1.4.1, restart the tmm to resolve the issue. For F5 BIG-IP versions 13.0.0 through 13.1.1.5, restart the tmm to resolve the issue. For F5 BIG-IP versions 14.0.0 through 14.0.0.2, restart the tmm to resolve the issue.

Correção

Identificadores relacionados

CVE-2018-15317

Produtos afetados

F5 Big-Ip

Referências · 4

• https://support.f5.com/csp/article/K43625118 · Aviso do Fabricante
• https://support.f5.com/csp/article/K43625118?utm_source=f5support&amp%3Butm_medium=RSS · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-15317 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-15317 · Aviso do Fabricante