6.3

CVE-2018-5515

On F5 BIG-IP 13.0.0-13.1.0.5, using RADIUS authentication responses from a RADIUS server with IPv6 addresses may cause TMM to crash, leading to a failover event.

Data is provided by the National Vulnerability Database (NVD)
F5 ≫ Big-ip Local Traffic Manager Version >= 13.1.0 <= 13.1.0.5
F5 ≫ Big-ip Application Acceleration Manager Version >= 13.1.0 <= 13.1.0.5
F5 ≫ Big-ip Advanced Firewall Manager Version >= 13.1.0 <= 13.1.0.5
F5 ≫ Big-ip Analytics Version >= 13.1.0 <= 13.1.0.5
F5 ≫ Big-ip Access Policy Manager Version >= 13.1.0 <= 13.1.0.5
F5 ≫ Big-ip Application Security Manager Version >= 13.1.0 <= 13.1.0.5
F5 ≫ Big-ip Edge Gateway Version >= 13.1.0 <= 13.1.0.5
F5 ≫ Big-ip Global Traffic Manager Version >= 13.1.0 <= 13.1.0.5
F5 ≫ Big-ip Link Controller Version >= 13.1.0 <= 13.1.0.5
F5 ≫ Big-ip Policy Enforcement Manager Version >= 13.1.0 <= 13.1.0.5
F5 ≫ Big-ip Webaccelerator Version >= 13.1.0 <= 13.1.0.5
F5 ≫ Big-ip Websafe Version >= 13.1.0 <= 13.1.0.5
F5 ≫ Big-ip Domain Name System Version >= 13.1.0 <= 13.1.0.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 4.03% 0.874
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.4 0.7 3.6
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 6.3 6.8 6.9
AV:N/AC:M/Au:S/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/bid/104099
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040802
Third Party Advisory
VDB Entry