Design/Logic Flaw

2017-12-2117:29:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.4%

JSON

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings. The issue is also exposed with the non-default “normalize URI” configuration options used in iRules and/or BIG-IP LTM policies.

CPENameOperatorVersion
big-ip_access_policy_managereq13.0.0
big-ip_access_policy_managerge12.1.0
big-ip_access_policy_managerle12.1.2
big-ip_advanced_firewall_managereq13.0.0
big-ip_advanced_firewall_managerge12.1.0
big-ip_advanced_firewall_managerle12.1.2
big-ip_analyticseq13.0.0
big-ip_analyticsge12.1.0
big-ip_analyticsle12.1.2
big-ip_application_acceleration_managereq13.0.0

Name	Operator	Version
big-ip_access_policy_manager	eq	13.0.0
big-ip_access_policy_manager	ge	12.1.0
big-ip_access_policy_manager	le	12.1.2
big-ip_advanced_firewall_manager	eq	13.0.0
big-ip_advanced_firewall_manager	ge	12.1.0
big-ip_advanced_firewall_manager	le	12.1.2
big-ip_analytics	eq	13.0.0
big-ip_analytics	ge	12.1.0
big-ip_analytics	le	12.1.2
big-ip_application_acceleration_manager	eq	13.0.0