Multiple F5 BIG-IP Products CVE-2018-5501 Remote Denial of Service Vulnerability

Bugtraq ID:	103211
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2018-5501
Remote:	Yes
Local:	No
Published:	Mar 01 2018 12:00AM
Updated:	Mar 01 2018 12:00AM
Credit:	The vendor reported the issue.
Vulnerable:	F5 BIG-IP-LTM 12.1.1 F5 BIG-IP WebSafe 12.1.3 F5 BIG-IP WebSafe 12.1.2 HF2 F5 BIG-IP WebSafe 12.1.2 HF1 F5 BIG-IP WebSafe 12.1.2 F5 BIG-IP WebSafe 12.1.1 F5 BIG-IP WebSafe 11.6.2 HF1 F5 BIG-IP WebSafe 11.6.2 F5 BIG-IP WebSafe 11.6.1 HF1 F5 BIG-IP WebSafe 11.6.1 F5 BIG-IP WebSafe 11.5.5 F5 BIG-IP WebSafe 11.5.4 F5 BIG-IP WebSafe 11.5.3 F5 BIG-IP WebSafe 11.5.2 F5 BIG-IP WebSafe 11.6.1 HF2 F5 BIG-IP WebSafe 11.5.1 F5 BIG-IP WebAccelerator 11.5.4 HF2 F5 BIG-IP WebAccelerator 11.5.1 F5 BIG-IP WebAccelerator 11.2.1 HF8 F5 BIG-IP WebAccelerator 11.2.1 HF3 F5 BIG-IP WebAccelerator 11.2.1 HF16 F5 BIG-IP WebAccelerator 11.2.1 HF15 F5 BIG-IP WebAccelerator 11.2.1 F5 BIG-IP WebAccelerator 11.2.1 HF5 F5 BIG-IP PEM 12.1.3 F5 BIG-IP PEM 12.1.2 HF2 F5 BIG-IP PEM 12.1.2 HF1 F5 BIG-IP PEM 12.1.2 HF 1 F5 BIG-IP PEM 12.1.2 F5 BIG-IP PEM 12.1.1 F5 BIG-IP PEM 11.6.2 HF1 F5 BIG-IP PEM 11.6.2 F5 BIG-IP PEM 11.6.1 HF2 F5 BIG-IP PEM 11.6.1 HF1 F5 BIG-IP PEM 11.6.1 F5 BIG-IP PEM 11.5.4 HF3 F5 BIG-IP PEM 11.5.4 HF2 F5 BIG-IP PEM 11.5.4 HF1 F5 BIG-IP PEM 11.5.3 HF2 F5 BIG-IP PEM 11.5.3 F5 BIG-IP PEM 11.5.1 HF11 F5 BIG-IP PEM 11.5.1 HF10 F5 BIG-IP PEM 11.5.1 F5 BIG-IP PEM 11.5.5 F5 BIG-IP PEM 11.5.4 F5 BIG-IP PEM 11.5.3 HF1 F5 BIG-IP PEM 11.5.1 HF6 F5 BIG-IP LTM 12.1.3 F5 BIG-IP LTM 12.1.2 HF2 F5 BIG-IP LTM 12.1.2 HF1 F5 BIG-IP LTM 12.1.2 F5 BIG-IP LTM 12.1.1 F5 BIG-IP Link Controller 12.1.3 F5 BIG-IP Link Controller 12.1.2 HF2 F5 BIG-IP Link Controller 12.1.2 HF1 F5 BIG-IP Link Controller 12.1.2 F5 BIG-IP Link Controller 12.1.1 F5 BIG-IP Link Controller 11.6.1 HF2 F5 BIG-IP Link Controller 11.6.1 HF1 F5 BIG-IP Link Controller 11.5.4 HF3 F5 BIG-IP Link Controller 11.5.4 HF2 F5 BIG-IP Link Controller 11.5.4 HF1 F5 BIG-IP Link Controller 11.5.4 build 0.1.256 F5 BIG-IP Link Controller 11.5.3 HF2 F5 BIG-IP Link Controller 11.5.3 F5 BIG-IP Link Controller 11.5.2 F5 BIG-IP Link Controller 11.5.1 HF8 F5 BIG-IP Link Controller 11.5.1 HF11 F5 BIG-IP Link Controller 11.5.1 HF10 F5 BIG-IP Link Controller 11.5.1 F5 BIG-IP Link Controller 11.5 HF7 F5 BIG-IP Link Controller 11.2.1 HF8 F5 BIG-IP Link Controller 11.2.1 HF3 F5 BIG-IP Link Controller 11.2.1 HF16 F5 BIG-IP Link Controller 11.2.1 HF15 F5 BIG-IP Link Controller 11.2.1 HF14 F5 BIG-IP Link Controller 11.2.1 HF13 F5 BIG-IP Link Controller 11.2.1 HF12 F5 BIG-IP Link Controller 11.2.1 HF11 F5 BIG-IP Link Controller 11.2.1 HF10 F5 BIG-IP Link Controller 11.2.1 F5 BIG-IP Link Controller 11.6.2 HF1 F5 BIG-IP Link Controller 11.6.2 F5 BIG-IP Link Controller 11.6.1 F5 BIG-IP Link Controller 11.5.5 F5 BIG-IP Link Controller 11.5.4 F5 BIG-IP Link Controller 11.5.3 HF1 F5 BIG-IP Link Controller 11.2.1 HF5 F5 BIG-IP Link Controller 11.2.1 HF2 F5 BIG-IP Link Controller 11.2.1 HF1 F5 BIG-IP GTM 12.1.3 F5 BIG-IP GTM 12.1.2 F5 BIG-IP GTM 12.1.1 F5 BIG-IP GTM 12.1.2 HF1 F5 BIG-IP Edge Gateway 11.5.1 F5 BIG-IP Edge Gateway 11.2.1 HF9 F5 BIG-IP Edge Gateway 11.2.1 HF8 F5 BIG-IP Edge Gateway 11.2.1 HF3 F5 BIG-IP Edge Gateway 11.2.1 HF16 F5 BIG-IP Edge Gateway 11.2.1 HF15 F5 BIG-IP Edge Gateway 11.2.1 HF5 F5 BIG-IP Edge Gateway 11.2.1 HF2 F5 BIG-IP Edge Gateway 11.2.1 F5 BIG-IP DNS 12.1.3 F5 BIG-IP DNS 12.1.2 HF2 F5 BIG-IP DNS 12.1.2 HF1 F5 BIG-IP DNS 12.1.2 F5 BIG-IP DNS 12.1.1 F5 BIG-IP DNS 11.6.2 F5 BIG-IP DNS 11.6.1 F5 BIG-IP DNS 11.5.5 F5 BIG-IP DNS 11.5.4 HF1 F5 BIG-IP DNS 11.5.4 F5 BIG-IP DNS 11.5.3 F5 BIG-IP DNS 11.5.2 F5 BIG-IP DNS 11.5.1 F5 BIG-IP DNS 11.2.1 F5 BIG-IP ASM 12.1.3 F5 BIG-IP ASM 12.1.2 HF2 F5 BIG-IP ASM 12.1.2 HF1 F5 BIG-IP ASM 12.1.2 F5 BIG-IP ASM 12.1.1 F5 BIG-IP ASM 12.1.1 HF1 F5 BIG-IP APM 12.1.3 F5 BIG-IP APM 12.1.2 HF2 F5 BIG-IP APM 12.1.2 HF1 F5 BIG-IP APM 12.1.2 F5 BIG-IP APM 12.1.1 F5 BIG-IP APM 11.6.2 HF1 F5 BIG-IP APM 11.6.2 F5 BIG-IP APM 11.6.1 HF2 F5 BIG-IP APM 11.6.1 HF1 F5 BIG-IP APM 11.6.1 F5 BIG-IP APM 11.5.5 F5 BIG-IP APM 11.5.4 HF3 F5 BIG-IP APM 11.5.4 HF2 F5 BIG-IP APM 11.5.4 HF1 F5 BIG-IP APM 11.5.4 build 0.1.256 F5 BIG-IP APM 11.5.3 HF2 F5 BIG-IP APM 11.5.3 F5 BIG-IP APM 11.5.2 HF1 F5 BIG-IP APM 11.5.2 F5 BIG-IP APM 11.5.1 HF11 F5 BIG-IP APM 11.5.1 HF10 F5 BIG-IP APM 11.5.1 F5 BIG-IP APM 11.2.1 HF8 F5 BIG-IP APM 11.2.1 HF16 F5 BIG-IP APM 11.2.1 HF15 F5 BIG-IP APM 11.2.1 HF14 F5 BIG-IP APM 11.2.1 HF13 F5 BIG-IP APM 11.2.1 HF12 F5 BIG-IP APM 11.2.1 HF11 F5 BIG-IP APM 11.2.1 HF10 F5 BIG-IP APM 11.5.4 F5 BIG-IP APM 11.5.3 HF1 F5 BIG-IP APM 11.5.1 HF6 F5 BIG-IP APM 11.2.1 HF5 F5 BIG-IP APM 11.2.1 HF3 F5 BIG-IP APM 11.2.1 HF2 F5 BIG-IP APM 11.2.1 HF1 F5 BIG-IP APM 11.2.1 F5 BIG-IP Analytics 12.1.3 F5 BIG-IP Analytics 12.1.2 HF2 F5 BIG-IP Analytics 12.1.2 HF1 F5 BIG-IP Analytics 12.1.2 F5 BIG-IP Analytics 12.1.1 F5 BIG-IP Analytics 11.6.2 HF1 F5 BIG-IP Analytics 11.6.2 F5 BIG-IP Analytics 11.6.1 HF2 F5 BIG-IP Analytics 11.6.1 HF1 F5 BIG-IP Analytics 11.6.1 F5 BIG-IP Analytics 11.5.4 HF3 F5 BIG-IP Analytics 11.5.4 HF2 F5 BIG-IP Analytics 11.5.4 HF1 F5 BIG-IP Analytics 11.5.3 HF2 F5 BIG-IP Analytics 11.5.3 F5 BIG-IP Analytics 11.5.2 F5 BIG-IP Analytics 11.5.1 HF8 F5 BIG-IP Analytics 11.5.1 F5 BIG-IP Analytics 11.2.1 HF3 F5 BIG-IP Analytics 11.2.1 HF16 F5 BIG-IP Analytics 11.2.1 HF15 F5 BIG-IP Analytics 11.2.1 HF14 F5 BIG-IP Analytics 11.2.1 HF13 F5 BIG-IP Analytics 11.2.1 HF12 F5 BIG-IP Analytics 11.2.1 HF11 F5 BIG-IP Analytics 11.2.1 HF10 F5 BIG-IP Analytics 11.2.1 F5 BIG-IP Analytics 11.5.5 F5 BIG-IP Analytics 11.5.4 F5 BIG-IP Analytics 11.5.3 HF1 F5 BIG-IP Analytics 11.5.1 HF6 F5 BIG-IP Analytics 11.2.1 HF5 F5 BIG-IP Analytics 11.2.1 HF2 F5 BIG-IP Analytics 11.2.1 HF1 F5 BIG-IP AFM 12.1.3 F5 BIG-IP AFM 12.1.2 HF2 F5 BIG-IP AFM 12.1.2 HF1 F5 BIG-IP AFM 12.1.2 F5 BIG-IP AFM 12.1.1 F5 BIG-IP AFM 11.6.3 F5 BIG-IP AFM 11.6.1 HF2 F5 BIG-IP AFM 11.6.1 HF1 F5 BIG-IP AFM 11.6.1 F5 BIG-IP AFM 11.5.4 HF3 F5 BIG-IP AFM 11.5.4 HF2 F5 BIG-IP AFM 11.5.4 HF1 F5 BIG-IP AFM 11.5.3 HF2 F5 BIG-IP AFM 11.5.3 F5 BIG-IP AFM 11.5.2 F5 BIG-IP AFM 11.5.1 HF11 F5 BIG-IP AFM 11.5.1 HF10 F5 BIG-IP AFM 11.5.1 F5 BIG-IP AFM 11.2.1 F5 BIG-IP AFM 11.6.2 HF1 F5 BIG-IP AFM 11.6.2 F5 BIG-IP AFM 11.5.5 F5 BIG-IP AFM 11.5.4 F5 BIG-IP AFM 11.5.3 HF1 F5 BIG-IP AFM 11.5.1 HF6 F5 BIG-IP AAM 12.1.3 F5 BIG-IP AAM 12.1.2 HF2 F5 BIG-IP AAM 12.1.2 HF1 F5 BIG-IP AAM 12.1.2 F5 BIG-IP AAM 12.1.1 F5 BIG-IP AAM 11.6.2 HF1 F5 BIG-IP AAM 11.6.2 F5 BIG-IP AAM 11.6.1 HF2 F5 BIG-IP AAM 11.6.1 HF1 F5 BIG-IP AAM 11.6.1 F5 BIG-IP AAM 11.5.5 F5 BIG-IP AAM 11.5.4 HF3 F5 BIG-IP AAM 11.5.4 HF2 F5 BIG-IP AAM 11.5.4 HF1 F5 BIG-IP AAM 11.5.4 build 0.1.256 F5 BIG-IP AAM 11.5.3 HF2 F5 BIG-IP AAM 11.5.3 F5 BIG-IP AAM 11.5.2 F5 BIG-IP AAM 11.5.1 HF6 F5 BIG-IP AAM 11.5.1 HF11 F5 BIG-IP AAM 11.5.1 HF10 F5 BIG-IP AAM 11.5.1 build 10.104.180 F5 BIG-IP AAM 11.5.1 F5 BIG-IP AAM 11.2.1 F5 BIG-IP AAM 11.5.5.11.5.1 HF6 F5 BIG-IP AAM 11.5.4 F5 BIG-IP AAM 11.5.3 HF1 F5 BIG-IP WebAccelerator 11.2.1 HF9 F5 BIG-IP PEM 12.1.1 F5 BIG-IP PEM 11.6.1 F5 BIG-IP LTM 12.1.1 F5 BIG-IP LTM 11.6.1 F5 BIG-IP LTM 11.2.1 HF9 F5 BIG-IP Link Controller 12.1.1 F5 BIG-IP Link Controller 11.6.1 F5 BIG-IP Link Controller 11.2.1 HF9 F5 BIG-IP GTM 11.6.1 F5 BIG-IP GTM 11.2.1 HF9 F5 BIG-IP Edge Gateway 11.2.1 HF9 F5 BIG-IP ASM 12.1.1 F5 BIG-IP ASM 11.6.1 F5 BIG-IP ASM 11.4.1 F5 BIG-IP ASM 11.2.1 HF9 F5 BIG-IP ASM 11.2 HF9 F5 BIG-IP APM 12.1.1 F5 BIG-IP APM 11.6.1 F5 BIG-IP APM 11.2.1 HF9 F5 BIG-IP Analytics 12.1.1 F5 BIG-IP Analytics 11.6.1 F5 BIG-IP Analytics 11.2.1 HF9 F5 BIG-IP AFM 12.1.1 F5 BIG-IP AFM 11.6.1 F5 BIG-IP AAM 12.1.1 F5 BIG-IP AAM 11.6.1
Not Vulnerable:	F5 BIG-IP WebSafe 13.1 F5 BIG-IP WebSafe 12.1.3.2 F5 BIG-IP WebAccelerator 12.1.3.2 F5 BIG-IP PEM 13.1 F5 BIG-IP PEM 12.1.3.2 F5 BIG-IP LTM 13.1 F5 BIG-IP LTM 12.1.3.2 F5 BIG-IP Link Controller 13.1 F5 BIG-IP Link Controller 12.1.3.2 F5 BIG-IP GTM 13.1 F5 BIG-IP GTM 12.1.3.2 F5 BIG-IP DNS 13.1 F5 BIG-IP DNS 12.1.3.2 F5 BIG-IP ASM 13.1 F5 BIG-IP ASM 12.1.3.2 F5 BIG-IP APM 13.1 F5 BIG-IP APM 12.1.3.2 F5 BIG-IP Analytics 13.1 F5 BIG-IP Analytics 12.1.3.2 F5 BIG-IP AFM 13.1 F5 BIG-IP AFM 12.1.3.2 F5 BIG-IP AAM 13.1 F5 BIG-IP AAM 12.1.3.2

Multiple F5 BIG-IP Products CVE-2018-5501 Remote Denial of Service Vulnerability

Multiple F5 BIG-IP Products is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to crash the application resulting in denial-of-service conditions.

Multiple F5 BIG-IP Products CVE-2018-5501 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple F5 BIG-IP Products CVE-2018-5501 Remote Denial of Service Vulnerability

References:

• F5 BIG-IP Homepage (F5)
  
• K44200194: DNS TCP virtual server vulnerability CVE-2018-5501 (F5)