PT-2018-16995 · F5 · Big-Ip

Published 2018-03-01 · Updated 2018-03-23 · CVE-2018-5501

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP systems versions 11.2.1 F5 BIG-IP systems versions 11.5.x F5 BIG-IP systems versions 11.6.x F5 BIG-IP systems versions 12.1.0 through 12.1.3.1 F5 BIG-IP systems version 13.0.0

Description The issue is related to the TCP DNS profile, which allows excessive buffering due to a lack of flow control under certain circumstances.

Recommendations For version 11.2.1, update the configuration to implement flow control for the TCP DNS profile. For versions 11.5.x, update the configuration to implement flow control for the TCP DNS profile. For versions 11.6.x, update the configuration to implement flow control for the TCP DNS profile. For versions 12.1.0 through 12.1.3.1, update the configuration to implement flow control for the TCP DNS profile. For version 13.0.0, update the configuration to implement flow control for the TCP DNS profile.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2018-5501

Affected Products

Big-Ip

References · 4

• https://osv.dev/vulnerability/CVE-2018-5501 · Vendor Advisory
• https://support.f5.com/csp/article/K44200194 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-5501 · Security Note
• http://securityfocus.com/bid/103211 · Note