F5 Networks BIG-IP : BIND vulnerability (K15840535)

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from F5 Networks BIG-IP Solution K15840535.
#
# The text description of this plugin is (C) F5 Networks.
#

include('compat.inc');

if (description)
{
  script_id(133625);
  script_version("1.7");
  script_set_attribute(attribute:"plugin_modification_date", value:"2023/11/02");

  script_cve_id("CVE-2019-6477");

  script_name(english:"F5 Networks BIG-IP : BIND vulnerability (K15840535)");

  script_set_attribute(attribute:"synopsis", value:
"The remote device is missing a vendor-supplied security patch.");
  script_set_attribute(attribute:"description", value:
"With pipelining enabled each incoming query on a TCP connection
requires a similar resource allocation to a query received via UDP or
via TCP without pipelining enabled. A client using a TCP-pipelined
connection to a server could consume more resources than the server
has been provisioned to handle. When a TCP connection with a large
number of pipelined queries is closed, the load on the server
releasing these multiple resources can cause it to become
unresponsive, even for queries that can be answered authoritatively or
from cache. (This is most likely to be perceived as an intermittent
server problem). (CVE-2019-6477)

Impact

An attacker may be able to use TCP-pipelined queries to increase the
load on the system, causing it to become unresponsive.");
  script_set_attribute(attribute:"see_also", value:"https://my.f5.com/manage/s/article/K15840535");
  script_set_attribute(attribute:"solution", value:
"Upgrade to one of the non-vulnerable versions listed in the F5 Solution K15840535.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-6477");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/11/26");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/12/02");
  script_set_attribute(attribute:"plugin_publication_date", value:"2020/02/12");

  script_set_attribute(attribute:"potential_vulnerability", value:"true");
  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_access_policy_manager");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_advanced_firewall_manager");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_application_acceleration_manager");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_application_security_manager");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_application_visibility_and_reporting");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_domain_name_system");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_global_traffic_manager");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_link_controller");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_local_traffic_manager");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:f5:big-ip_policy_enforcement_manager");
  script_set_attribute(attribute:"cpe", value:"cpe:/h:f5:big-ip");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"F5 Networks Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2020-2023 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("f5_bigip_detect.nbin");
  script_require_keys("Host/local_checks_enabled", "Host/BIG-IP/hotfix", "Host/BIG-IP/modules", "Host/BIG-IP/version", "Settings/ParanoidReport");

  exit(0);
}


include('f5_func.inc');

if ( ! get_kb_item('Host/local_checks_enabled') ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var version = get_kb_item('Host/BIG-IP/version');
if ( ! version ) audit(AUDIT_OS_NOT, 'F5 Networks BIG-IP');
if ( isnull(get_kb_item('Host/BIG-IP/hotfix')) ) audit(AUDIT_KB_MISSING, 'Host/BIG-IP/hotfix');
if ( ! get_kb_item('Host/BIG-IP/modules') ) audit(AUDIT_KB_MISSING, 'Host/BIG-IP/modules');

if (report_paranoia < 2) audit(AUDIT_PARANOID);

var sol = 'K15840535';
var vmatrix = {
  'AFM': {
    'affected': [
      '15.0.1-15.1.0','14.1.1-14.1.2','13.1.2-13.1.3','12.1.5','11.6.5','11.5.10'
    ],
    'unaffected': [
      '16.0.0','15.1.0.5','14.1.2.5','13.1.3.4','12.1.5.1','11.6.5.2'
    ],
  },
  'AM': {
    'affected': [
      '15.0.1-15.1.0','14.1.1-14.1.2','13.1.2-13.1.3','12.1.5','11.6.5','11.5.10'
    ],
    'unaffected': [
      '16.0.0','15.1.0.5','14.1.2.5','13.1.3.4','12.1.5.1','11.6.5.2'
    ],
  },
  'APM': {
    'affected': [
      '15.0.1-15.1.0','14.1.1-14.1.2','13.1.2-13.1.3','12.1.5','11.6.5','11.5.10'
    ],
    'unaffected': [
      '16.0.0','15.1.0.5','14.1.2.5','13.1.3.4','12.1.5.1','11.6.5.2'
    ],
  },
  'ASM': {
    'affected': [
      '15.0.1-15.1.0','14.1.1-14.1.2','13.1.2-13.1.3','12.1.5','11.6.5','11.5.10'
    ],
    'unaffected': [
      '16.0.0','15.1.0.5','14.1.2.5','13.1.3.4','12.1.5.1','11.6.5.2'
    ],
  },
  'AVR': {
    'affected': [
      '15.0.1-15.1.0','14.1.1-14.1.2','13.1.2-13.1.3','12.1.5','11.6.5','11.5.10'
    ],
    'unaffected': [
      '16.0.0','15.1.0.5','14.1.2.5','13.1.3.4','12.1.5.1','11.6.5.2'
    ],
  },
  'DNS': {
    'affected': [
      '15.0.1-15.1.0','14.1.1-14.1.2','13.1.2-13.1.3','12.1.5','11.6.5','11.5.10'
    ],
    'unaffected': [
      '16.0.0','15.1.0.5','14.1.2.5','13.1.3.4','12.1.5.1','11.6.5.2'
    ],
  },
  'GTM': {
    'affected': [
      '15.0.1-15.1.0','14.1.1-14.1.2','13.1.2-13.1.3','12.1.5','11.6.5','11.5.10'
    ],
    'unaffected': [
      '16.0.0','15.1.0.5','14.1.2.5','13.1.3.4','12.1.5.1','11.6.5.2'
    ],
  },
  'LC': {
    'affected': [
      '15.0.1-15.1.0','14.1.1-14.1.2','13.1.2-13.1.3','12.1.5','11.6.5','11.5.10'
    ],
    'unaffected': [
      '16.0.0','15.1.0.5','14.1.2.5','13.1.3.4','12.1.5.1','11.6.5.2'
    ],
  },
  'LTM': {
    'affected': [
      '15.0.1-15.1.0','14.1.1-14.1.2','13.1.2-13.1.3','12.1.5','11.6.5','11.5.10'
    ],
    'unaffected': [
      '16.0.0','15.1.0.5','14.1.2.5','13.1.3.4','12.1.5.1','11.6.5.2'
    ],
  },
  'PEM': {
    'affected': [
      '15.0.1-15.1.0','14.1.1-14.1.2','13.1.2-13.1.3','12.1.5','11.6.5','11.5.10'
    ],
    'unaffected': [
      '16.0.0','15.1.0.5','14.1.2.5','13.1.3.4','12.1.5.1','11.6.5.2'
    ],
  }
};

if (bigip_is_affected(vmatrix:vmatrix, sol:sol))
{
  var extra = NULL;
  if (report_verbosity > 0) extra = bigip_report_get();
  security_report_v4(
      port       : 0,
      severity   : SECURITY_WARNING,
      extra      : extra
  );
}
else
{
  var tested = bigip_get_tested_modules();
  var audit_extra = 'For BIG-IP module(s) ' + tested + ',';
  if (tested) audit(AUDIT_INST_VER_NOT_VULN, audit_extra, version);
  else audit(AUDIT_HOST_NOT, 'running any of the affected modules');
}