PT-2018-17006 · F5 · Big-Ip

Published 2018-05-02 · Updated 2019-10-03 · CVE-2018-5512

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 13.1.0 through 13.1.0.5

Description The issue occurs when Large Receive Offload (LRO) and SYN cookies are enabled, which are default settings. Undisclosed traffic patterns may cause the Traffic Management Microkernel (TMM) to restart.

Recommendations For versions 13.1.0 through 13.1.0.5, consider disabling Large Receive Offload (LRO) or SYN cookies as a temporary workaround to minimize the risk of TMM restarts until a patch is available.

Fix

Related Identifiers

CVE-2018-5512

Affected Products

Big-Ip

References · 5

• https://support.f5.com/csp/article/K51754851 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-5512 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-5512 · Security Note
• http://securitytracker.com/id/1040801 · Note
• http://securityfocus.com/bid/104095 · Note