PT-2018-12961 · F5 · F5 Big-Ip

Published 2018-10-31 · Updated 2019-10-03 · CVE-2018-15317

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.2.1 through 11.6.3.2 F5 BIG-IP versions 12.1.0 through 12.1.4.1 F5 BIG-IP versions 13.0.0 through 13.1.1.5 F5 BIG-IP versions 14.0.0 through 14.0.0.2

Description The issue arises when an attacker sends specially crafted SSL records to an SSL Virtual Server, causing corruption in the SSL data structures. This leads to intermittent decrypt BAD RECORD MAC errors, preventing clients from accessing the application load balanced by a virtual server with an SSL profile until the tmm is restarted.

Recommendations For F5 BIG-IP versions 11.2.1 through 11.6.3.2, restart the tmm to resolve the issue. For F5 BIG-IP versions 12.1.0 through 12.1.4.1, restart the tmm to resolve the issue. For F5 BIG-IP versions 13.0.0 through 13.1.1.5, restart the tmm to resolve the issue. For F5 BIG-IP versions 14.0.0 through 14.0.0.2, restart the tmm to resolve the issue.

Fix

Related Identifiers

CVE-2018-15317

Affected Products

F5 Big-Ip

References · 4

• https://support.f5.com/csp/article/K43625118 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-15317 · Security Note
• https://osv.dev/vulnerability/CVE-2018-15317 · Vendor Advisory
• https://support.f5.com/csp/article/K43625118?utm_source=f5support&amp%3Butm_medium=RSS · Note