K49440608 : TMOS vulnerability CVE-2018-5509

Security Advisory Description

When a specifically configured virtual server receives traffic of an undisclosed nature, the Traffic Management Microkernel (TMM) will crash and take the configured failover action, potentially causing a denial of service. The configuration that exposes this issue is not common and in general does not work when enabled in previous versions of BIG-IP. Starting in 12.1.0, BIG-IP will crash if the configuration that exposes this issue is enabled and the virtual server receives non-TCP traffic. With the fix of this issue, additional configuration validation logic has been added to prevent this configuration from being applied to a virtual server. (CVE-2018-5509)

Impact

This vulnerability allows for a remote disruption of service.