CVE-2018-5527

2018-06-2720:00:00

www.cve.org

EPSS

0.002

Percentile

53.3%

JSON

On BIG-IP 13.1.0-13.1.0.7, a remote attacker using undisclosed methods against virtual servers configured with a Client SSL or Server SSL profile that has the SSL Forward Proxy feature enabled can force the Traffic Management Microkernel (tmm) to leak memory. As a result, system memory usage increases over time, which may eventually cause a decrease in performance or a system reboot due to memory exhaustion.

CNA Affected

[
  {
    "product": "BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe)",
    "vendor": "F5 Networks, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "13.1.0-13.1.0..7"
      }
    ]
  }
]

References

www.securitytracker.com/id/1041196

support.f5.com/csp/article/K20134942

EPSS

0.002

Percentile

53.3%

JSON

Related for CVELIST:CVE-2018-5527