K62750376 : RADIUS authentication vulnerability CVE-2018-5515

Security Advisory Description

Using RADIUS authentication responses from a RADIUS server with IPv6 addresses may cause TMM to crash, leading to a failover event. (CVE-2018-5515)

Impact

BIG-IP

When a BIG-IP system receives a RADIUS authentication response from a IPv6 RADIUS server, the affected system produces a Traffic Management Microkernel (TMM) core file and restarts TMM, resulting in a failover event. This vulnerability affects only BIG-IP systems configured with RADIUS authentication for BIG-IP administrative users.

BIG-IQ / F5 iWorkflow / Enterprise Manager / ARX / LineRate / Traffix SDC

There is no impact; these F5 products are not affected by this vulnerability.