F5 Networks BIG-IP : BIG-IP system vulnerability (K51754851)

High Nessus Plugin ID 118674


The remote device is missing a vendor-supplied security patch.


WhenLarge Receive Offload(LRO)and SYN cookies are enabled (default settings), undisclosed traffic patterns may cause TMM to restart.


An attacker may be able to causea disruption of service. Exposure to this vulnerability is limited to the data plane on hardwareplatforms.
There is no exposure to the control plane or BIG-IPVirtual Edition (VE). The BIG-IP system will take the configured high availability (HA) action for the Traffic Management Microkernel (TMM) when experiencing this issue.


Upgrade to one of the non-vulnerable versions listed in the F5 Solution K51754851.

See Also


Plugin Details

Severity: High

ID: 118674

File Name: f5_bigip_SOL51754851.nasl

Version: 1.2

Type: local

Published: 2018/11/02

Updated: 2019/01/04

Dependencies: 76940

Configuration: Enable paranoid mode

Risk Information

Risk Factor: High

CVSS v2.0

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS v3.0

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vulnerability Information

CPE: cpe:/a:f5:big-ip_access_policy_manager, cpe:/a:f5:big-ip_advanced_firewall_manager, cpe:/a:f5:big-ip_application_acceleration_manager, cpe:/a:f5:big-ip_application_security_manager, cpe:/a:f5:big-ip_application_visibility_and_reporting, cpe:/a:f5:big-ip_global_traffic_manager, cpe:/a:f5:big-ip_link_controller, cpe:/a:f5:big-ip_local_traffic_manager, cpe:/a:f5:big-ip_policy_enforcement_manager, cpe:/a:f5:big-ip_webaccelerator, cpe:/h:f5:big-ip

Required KB Items: Host/local_checks_enabled, Host/BIG-IP/hotfix, Host/BIG-IP/modules, Host/BIG-IP/version, Settings/ParanoidReport

Patch Publication Date: 2018/04/30

Reference Information

CVE: CVE-2018-5512