7.5

CVE-2018-5510

On F5 BIG-IP 11.5.4 HF4-11.5.5, the Traffic Management Microkernel (TMM) may restart when processing a specific sequence of packets on IPv6 virtual servers.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F5 ≫ Big-ip Local Traffic Manager Version 11.5.4
F5 ≫ Big-ip Local Traffic Manager Version 11.5.4 Update hf1
F5 ≫ Big-ip Local Traffic Manager Version 11.5.4 Update hf2
F5 ≫ Big-ip Local Traffic Manager Version 11.5.4 Update hf3
F5 ≫ Big-ip Local Traffic Manager Version 11.5.4 Update hf4
F5 ≫ Big-ip Local Traffic Manager Version 11.5.5
F5 ≫ Big-ip Application Acceleration Manager Version 11.5.4 Update hf1
F5 ≫ Big-ip Application Acceleration Manager Version 11.5.4 Update hf2
F5 ≫ Big-ip Application Acceleration Manager Version 11.5.4 Update hf3
F5 ≫ Big-ip Application Acceleration Manager Version 11.5.4 Update hf4
F5 ≫ Big-ip Advanced Firewall Manager Version 11.5.4 Update hf1
F5 ≫ Big-ip Advanced Firewall Manager Version 11.5.4 Update hf2
F5 ≫ Big-ip Advanced Firewall Manager Version 11.5.4 Update hf3
F5 ≫ Big-ip Advanced Firewall Manager Version 11.5.4 Update hf4
F5 ≫ Big-ip Analytics Version 11.5.4
F5 ≫ Big-ip Analytics Version 11.5.4 Update hf1
F5 ≫ Big-ip Analytics Version 11.5.4 Update hf2
F5 ≫ Big-ip Analytics Version 11.5.4 Update hf3
F5 ≫ Big-ip Analytics Version 11.5.4 Update hf4
F5 ≫ Big-ip Analytics Version 11.5.5
F5 ≫ Big-ip Access Policy Manager Version 11.5.4
F5 ≫ Big-ip Access Policy Manager Version 11.5.4 Update hf1
F5 ≫ Big-ip Access Policy Manager Version 11.5.4 Update hf2
F5 ≫ Big-ip Access Policy Manager Version 11.5.4 Update hf3
F5 ≫ Big-ip Access Policy Manager Version 11.5.4 Update hf4
F5 ≫ Big-ip Access Policy Manager Version 11.5.5
F5 ≫ Big-ip Application Security Manager Version 11.5.4 Update hf1
F5 ≫ Big-ip Application Security Manager Version 11.5.4 Update hf2
F5 ≫ Big-ip Application Security Manager Version 11.5.4 Update hf3
F5 ≫ Big-ip Application Security Manager Version 11.5.4 Update hf4
F5 ≫ Big-ip Edge Gateway Version 11.5.4
F5 ≫ Big-ip Edge Gateway Version 11.5.4 Update hf1
F5 ≫ Big-ip Edge Gateway Version 11.5.4 Update hf2
F5 ≫ Big-ip Edge Gateway Version 11.5.4 Update hf3
F5 ≫ Big-ip Edge Gateway Version 11.5.4 Update hf4
F5 ≫ Big-ip Edge Gateway Version 11.5.5
F5 ≫ Big-ip Global Traffic Manager Version 11.5.4
F5 ≫ Big-ip Global Traffic Manager Version 11.5.4 Update hf1
F5 ≫ Big-ip Global Traffic Manager Version 11.5.4 Update hf2
F5 ≫ Big-ip Global Traffic Manager Version 11.5.4 Update hf3
F5 ≫ Big-ip Global Traffic Manager Version 11.5.4 Update hf4
F5 ≫ Big-ip Global Traffic Manager Version 11.5.5
F5 ≫ Big-ip Link Controller Version 11.5.4
F5 ≫ Big-ip Link Controller Version 11.5.4 Update hf1
F5 ≫ Big-ip Link Controller Version 11.5.4 Update hf2
F5 ≫ Big-ip Link Controller Version 11.5.4 Update hf3
F5 ≫ Big-ip Link Controller Version 11.5.4 Update hf4
F5 ≫ Big-ip Link Controller Version 11.5.5
F5 ≫ Big-ip Policy Enforcement Manager Version 11.5.4 Update hf1
F5 ≫ Big-ip Policy Enforcement Manager Version 11.5.4 Update hf2
F5 ≫ Big-ip Policy Enforcement Manager Version 11.5.4 Update hf3
F5 ≫ Big-ip Policy Enforcement Manager Version 11.5.4 Update hf4
F5 ≫ Big-ip Webaccelerator Version 11.5.4
F5 ≫ Big-ip Webaccelerator Version 11.5.4 Update hf1
F5 ≫ Big-ip Webaccelerator Version 11.5.4 Update hf2
F5 ≫ Big-ip Webaccelerator Version 11.5.4 Update hf3
F5 ≫ Big-ip Webaccelerator Version 11.5.4 Update hf4
F5 ≫ Big-ip Webaccelerator Version 11.5.5
F5 ≫ Big-ip Websafe Version 11.5.4
F5 ≫ Big-ip Websafe Version 11.5.4 Update hf1
F5 ≫ Big-ip Websafe Version 11.5.4 Update hf2
F5 ≫ Big-ip Websafe Version 11.5.4 Update hf3
F5 ≫ Big-ip Websafe Version 11.5.4 Update hf4
F5 ≫ Big-ip Websafe Version 11.5.5
F5 ≫ Big-ip Domain Name System Version 11.5.4
F5 ≫ Big-ip Domain Name System Version 11.5.4 Update hf1
F5 ≫ Big-ip Domain Name System Version 11.5.4 Update hf2
F5 ≫ Big-ip Domain Name System Version 11.5.4 Update hf3
F5 ≫ Big-ip Domain Name System Version 11.5.4 Update hf4
F5 ≫ Big-ip Domain Name System Version 11.5.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.05% 0.599
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://support.f5.com/csp/article/K77671456
Vendor Advisory