F5 Networks BIG-IP : BIG-IP system vulnerability (K51754851)

High Nessus Plugin ID 118674

Synopsis

The remote device is missing a vendor-supplied security patch.

Description

WhenLarge Receive Offload(LRO)and SYN cookies are enabled (default
settings), undisclosed traffic patterns may cause TMM to restart.
(CVE-2018-5512)

Impact

An attacker may be able to causea disruption of service. Exposure to
this vulnerability is limited to the data plane on hardwareplatforms.
There is no exposure to the control plane or BIG-IPVirtual Edition
(VE). The BIG-IP system will take the configured high availability
(HA) action for the Traffic Management Microkernel (TMM) when
experiencing this issue.

Solution

Upgrade to one of the non-vulnerable versions listed in the F5
Solution K51754851.

See Also

https://support.f5.com/csp/article/K51754851

Plugin Details

Severity: High

ID: 118674

File Name: f5_bigip_SOL51754851.nasl

Version: 1.2

Type: local

Published: 2018/11/02

Modified: 2019/01/04

Dependencies: 76940

Risk Information

Risk Factor: High

CVSS v2.0

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS v3.0

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vulnerability Information

CPE: cpe:/a:f5:big-ip_access_policy_manager, cpe:/a:f5:big-ip_advanced_firewall_manager, cpe:/a:f5:big-ip_application_acceleration_manager, cpe:/a:f5:big-ip_application_security_manager, cpe:/a:f5:big-ip_application_visibility_and_reporting, cpe:/a:f5:big-ip_global_traffic_manager, cpe:/a:f5:big-ip_link_controller, cpe:/a:f5:big-ip_local_traffic_manager, cpe:/a:f5:big-ip_policy_enforcement_manager, cpe:/a:f5:big-ip_webaccelerator, cpe:/h:f5:big-ip

Patch Publication Date: 2018/04/30

Reference Information

CVE: CVE-2018-5512