Lucene search
HistoryApr 13, 2018 - 1:29 p.m.
CVE-2018-5507
f5
big-ip
ssl
vulnerability
decryption
nvd
cve-2018-5507
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
53.9%
On F5 BIG-IP versions 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5, vCMP guests running on VIPRION 2100, 4200 and 4300 series blades cannot correctly decrypt ciphertext from established SSL sessions with small MTU.
Affected configurations
Node
f5big-ip_local_traffic_managerRange11.5.1–11.5.5
ORf5big-ip_local_traffic_managerRange11.6.1–11.6.2
ORf5big-ip_local_traffic_managerRange12.1.0–12.1.3
ORf5big-ip_local_traffic_managerMatch13.0.0
f5viprion_2100_bladesMatch-
ORf5viprion_4200_bladesMatch-
ORf5viprion_4300_bladesMatch-
Node
f5big-ip_application_acceleration_managerRange11.5.1–11.5.5
ORf5big-ip_application_acceleration_managerRange11.6.1–11.6.2
ORf5big-ip_application_acceleration_managerRange12.1.0–12.1.3
ORf5big-ip_application_acceleration_managerMatch13.0.0
f5viprion_2100_bladesMatch-
ORf5viprion_4200_bladesMatch-
ORf5viprion_4300_bladesMatch-
Node
f5big-ip_advanced_firewall_managerRange11.5.1–11.5.5
ORf5big-ip_advanced_firewall_managerRange11.6.1–11.6.2
ORf5big-ip_advanced_firewall_managerRange12.1.0–12.1.3
ORf5big-ip_advanced_firewall_managerMatch13.0.0
f5viprion_2100_bladesMatch-
ORf5viprion_4200_bladesMatch-
ORf5viprion_4300_bladesMatch-
Node
f5big-ip_analyticsRange11.5.1–11.5.5
ORf5big-ip_analyticsRange11.6.1–11.6.2
ORf5big-ip_analyticsRange12.1.0–12.1.3
ORf5big-ip_analyticsMatch13.0.0
f5viprion_2100_bladesMatch-
ORf5viprion_4200_bladesMatch-
ORf5viprion_4300_bladesMatch-
Node
f5big-ip_access_policy_managerRange11.5.1–11.5.5
ORf5big-ip_access_policy_managerRange11.6.1–11.6.2
ORf5big-ip_access_policy_managerRange12.1.0–12.1.3
ORf5big-ip_access_policy_managerMatch13.0.0
f5viprion_2100_bladesMatch-
ORf5viprion_4200_bladesMatch-
ORf5viprion_4300_bladesMatch-
Node
f5big-ip_application_security_managerRange11.5.1–11.5.5
ORf5big-ip_application_security_managerRange11.6.1–11.6.2
ORf5big-ip_application_security_managerRange12.1.0–12.1.3
ORf5big-ip_application_security_managerMatch13.0.0
f5viprion_2100_bladesMatch-
ORf5viprion_4200_bladesMatch-
ORf5viprion_4300_bladesMatch-
Node
f5big-ip_edge_gatewayRange11.5.1–11.5.5
ORf5big-ip_edge_gatewayRange11.6.1–11.6.2
ORf5big-ip_edge_gatewayRange12.1.0–12.1.3
ORf5big-ip_edge_gatewayMatch13.0.0
f5viprion_2100_bladesMatch-
ORf5viprion_4200_bladesMatch-
ORf5viprion_4300_bladesMatch-
Node
f5big-ip_global_traffic_managerRange11.5.1–11.5.5
ORf5big-ip_global_traffic_managerRange11.6.1–11.6.2
ORf5big-ip_global_traffic_managerRange12.1.0–12.1.3
ORf5big-ip_global_traffic_managerMatch13.0.0
f5viprion_2100_bladesMatch-
ORf5viprion_4200_bladesMatch-
ORf5viprion_4300_bladesMatch-
Node
f5big-ip_link_controllerRange11.5.1–11.5.5
ORf5big-ip_link_controllerRange11.6.1–11.6.2
ORf5big-ip_link_controllerRange12.1.0–12.1.3
ORf5big-ip_link_controllerMatch13.0.0
f5viprion_2100_bladesMatch-
ORf5viprion_4200_bladesMatch-
ORf5viprion_4300_bladesMatch-
Node
f5big-ip_policy_enforcement_managerRange11.5.1–11.5.5
ORf5big-ip_policy_enforcement_managerRange11.6.1–11.6.2
ORf5big-ip_policy_enforcement_managerRange12.1.0–12.1.3
ORf5big-ip_policy_enforcement_managerMatch13.0.0
f5viprion_2100_bladesMatch-
ORf5viprion_4200_bladesMatch-
ORf5viprion_4300_bladesMatch-
Node
f5big-ip_webacceleratorRange11.5.1–11.5.5
ORf5big-ip_webacceleratorRange11.6.1–11.6.2
ORf5big-ip_webacceleratorRange12.1.0–12.1.3
ORf5big-ip_webacceleratorMatch13.0.0
f5viprion_2100_bladesMatch-
ORf5viprion_4200_bladesMatch-
ORf5viprion_4300_bladesMatch-
Node
f5big-ip_websafeRange11.5.1–11.5.5
ORf5big-ip_websafeRange11.6.1–11.6.2
ORf5big-ip_websafeRange12.1.0–12.1.3
ORf5big-ip_websafeMatch13.0.0
f5viprion_2100_bladesMatch-
ORf5viprion_4200_bladesMatch-
ORf5viprion_4300_bladesMatch-
Node
f5big-ip_domain_name_systemRange11.5.1–11.5.5
ORf5big-ip_domain_name_systemRange11.6.1–11.6.2
ORf5big-ip_domain_name_systemRange12.1.0–12.1.3
ORf5big-ip_domain_name_systemMatch13.0.0
f5viprion_2100_bladesMatch-
ORf5viprion_4200_bladesMatch-
ORf5viprion_4300_bladesMatch-
CNA Affected
[
{
"product": "BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe)",
"vendor": "F5 Networks, Inc.",
"versions": [
{
"status": "affected",
"version": "13.0.0"
},
{
"status": "affected",
"version": "12.1.0-12.1.3.1"
},
{
"status": "affected",
"version": "11.6.1-11.6.2"
},
{
"status": "affected",
"version": "11.5.1-11.5.5"
}
]
}
]References
Related
f5
f5
cvelist
cvelist
CVE-2018-5507
2018-04-12 00:00:00
nvd
nvd
CVE-2018-5507
2018-04-13 13:29:00
prion
prion
Code injection
2018-04-13 13:29:00
nessus
nessus
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
53.9%
Related for CVE-2018-5507