PT-2018-17008 · F5 · F5 Big-Ip

Publicado 2018-05-02 · Atualizado 2018-06-13 · CVE-2018-5514

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 13.1.0 through 13.1.0.5

Description The issue allows maliciously crafted HTTP/2 request frames to cause a denial of service. This exposure is specific to the data plane for virtual servers when the HTTP2 profile is enabled. There is no control plane exposure to this issue.

Recommendations For F5 BIG-IP versions 13.1.0 through 13.1.0.5, consider disabling the HTTP2 profile as a temporary workaround to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-5514

Produtos afetados

F5 Big-Ip

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-5514 · Nota de Segurança
• http://securityfocus.com/bid/104097 · Nota
• https://osv.dev/vulnerability/CVE-2018-5514 · Aviso do Fabricante
• http://securitytracker.com/id/1040804 · Nota
• https://support.f5.com/csp/article/K45320419 · Aviso do Fabricante