PT-2018-17006 · F5 · Big-Ip

Publicado 2018-05-02 · Atualizado 2019-10-03 · CVE-2018-5512

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 13.1.0 through 13.1.0.5

Description The issue occurs when Large Receive Offload (LRO) and SYN cookies are enabled, which are default settings. Undisclosed traffic patterns may cause the Traffic Management Microkernel (TMM) to restart.

Recommendations For versions 13.1.0 through 13.1.0.5, consider disabling Large Receive Offload (LRO) or SYN cookies as a temporary workaround to minimize the risk of TMM restarts until a patch is available.

Correção

Identificadores relacionados

CVE-2018-5512

Produtos afetados

Big-Ip

Referências · 5

• https://support.f5.com/csp/article/K51754851 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-5512 · Aviso do Fabricante
• http://securitytracker.com/id/1040801 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-5512 · Nota de Segurança
• http://securityfocus.com/bid/104095 · Nota