F5 Networks BIG-IP : BIG-IP system vulnerability (K51754851)

High Nessus Plugin ID 118674

Synopsis

The remote device is missing a vendor-supplied security patch.

Description

WhenLarge Receive Offload(LRO)and SYN cookies are enabled (default settings), undisclosed traffic patterns may cause TMM to restart.
(CVE-2018-5512)

Impact

An attacker may be able to causea disruption of service. Exposure to this vulnerability is limited to the data plane on hardwareplatforms.
There is no exposure to the control plane or BIG-IPVirtual Edition (VE). The BIG-IP system will take the configured high availability (HA) action for the Traffic Management Microkernel (TMM) when experiencing this issue.

Solution

Upgrade to one of the non-vulnerable versions listed in the F5 Solution K51754851.

See Also

https://support.f5.com/csp/#/article/K51754851

Plugin Details

Severity: High

ID: 118674

File Name: f5_bigip_SOL51754851.nasl

Version: 1.1

Type: local

Published: 2018/11/02

Modified: 2018/11/02

Dependencies: 76940

Risk Information

Risk Factor: High

CVSS v2.0

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS v3.0

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vulnerability Information

CPE: cpe:/a:f5:big-ip_access_policy_manager, cpe:/a:f5:big-ip_advanced_firewall_manager, cpe:/a:f5:big-ip_application_acceleration_manager, cpe:/a:f5:big-ip_application_security_manager, cpe:/a:f5:big-ip_application_visibility_and_reporting, cpe:/a:f5:big-ip_global_traffic_manager, cpe:/a:f5:big-ip_link_controller, cpe:/a:f5:big-ip_local_traffic_manager, cpe:/a:f5:big-ip_policy_enforcement_manager, cpe:/a:f5:big-ip_webaccelerator, cpe:/h:f5:big-ip

Required KB Items: Host/local_checks_enabled, Host/BIG-IP/hotfix, Host/BIG-IP/modules, Host/BIG-IP/version, Settings/ParanoidReport

Patch Publication Date: 2018/04/30

Reference Information

CVE: CVE-2018-5512