F5 Networks BIG-IP : BIG-IP system vulnerability (K51754851)
High Nessus Plugin ID 118674
SynopsisThe remote device is missing a vendor-supplied security patch.
DescriptionWhenLarge Receive Offload(LRO)and SYN cookies are enabled (default
settings), undisclosed traffic patterns may cause TMM to restart.
An attacker may be able to causea disruption of service. Exposure to
this vulnerability is limited to the data plane on hardwareplatforms.
There is no exposure to the control plane or BIG-IPVirtual Edition
(VE). The BIG-IP system will take the configured high availability
(HA) action for the Traffic Management Microkernel (TMM) when
experiencing this issue.
SolutionUpgrade to one of the non-vulnerable versions listed in the F5