SOL75152412 - OpenSSL vulnerability CVE-2016-2108

2016-05-19T00:00:00
ID SOL75152412
Type f5
Reporter f5
Modified 2016-10-11T00:00:00

Description

Vulnerability Recommended Actions

If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are currently running, or does not list a non-vulnerable version, then no upgrade candidate currently exists.

BIG-IP, BIG-IQ, and Enterprise Manager

To minimize risk, ensure that certificates accepted from clients or servers are configured to validate against a known-secure Certificate Authority (CA).

ARX

To mitigate this vulnerability, you should permit access to the ARX GUI only over a secure network.

LineRate

To mitigate this vulnerability, you should avoid configuring certificate bundles on the SSL profile from an untrusted source.

Supplemental Information

  • SOL9970: Subscribing to email notifications regarding F5 products
  • SOL9957: Creating a custom RSS feed to view new and updated documents
  • SOL4602: Overview of the F5 security vulnerability response policy
  • SOL4918: Overview of the F5 critical issue hotfix policy