Multiple F5 BIG-IP Products CVE-2018-5509 Remote Denial of Service Vulnerability

Bugtraq ID:	103504
Class:	Design Error
CVE:	CVE-2018-5509
Remote:	Yes
Local:	No
Published:	Mar 22 2018 12:00AM
Updated:	Mar 22 2018 12:00AM
Credit:	The vendor reported the issue.
Vulnerable:	F5 BIG-IP WebSafe 13.0 F5 BIG-IP WebSafe 12.1.3 F5 BIG-IP WebSafe 12.1.2 F5 BIG-IP WebSafe 12.1.1 F5 BIG-IP WebSafe 12.1 HF2 F5 BIG-IP WebSafe 12.1 HF1 F5 BIG-IP WebSafe 12.1 F5 BIG-IP PEM 13.0 F5 BIG-IP PEM 12.1.3 F5 BIG-IP PEM 12.1.2 F5 BIG-IP PEM 12.1.1 F5 BIG-IP PEM 12.1 HF2 F5 BIG-IP PEM 12.1 HF1 F5 BIG-IP PEM 12.1.0 F5 BIG-IP LTM 13.0 F5 BIG-IP LTM 12.1.3 F5 BIG-IP LTM 12.1.2 F5 BIG-IP LTM 12.1.1 F5 BIG-IP LTM 12.1 HF2 F5 BIG-IP LTM 12.1 HF1 F5 BIG-IP LTM 12.1.0 F5 BIG-IP Link Controller 13.0 F5 BIG-IP Link Controller 12.1.3 F5 BIG-IP Link Controller 12.1.2 F5 BIG-IP Link Controller 12.1.1 F5 BIG-IP Link Controller 12.1 HF2 F5 BIG-IP Link Controller 12.1 HF1 F5 BIG-IP Link Controller 12.1.0 F5 BIG-IP GTM 12.1.2 F5 BIG-IP GTM 12.1.1 F5 BIG-IP GTM 12.1 F5 BIG-IP GTM 13.0.0 F5 BIG-IP DNS 13.0 F5 BIG-IP DNS 12.1.2 F5 BIG-IP DNS 12.1.1 F5 BIG-IP DNS 12.1.0 F5 BIG-IP ASM 13.0 F5 BIG-IP ASM 12.1.3 F5 BIG-IP ASM 12.1.2 F5 BIG-IP ASM 12.1.1 F5 BIG-IP ASM 12.1 HF2 F5 BIG-IP ASM 12.1 HF1 F5 BIG-IP ASM 12.1.1 HF1 F5 BIG-IP ASM 12.1.0 F5 BIG-IP APM 13.0 F5 BIG-IP APM 12.1.3 F5 BIG-IP APM 12.1.2 F5 BIG-IP APM 12.1.1 F5 BIG-IP APM 12.1 HF2 F5 BIG-IP APM 12.1 HF1 F5 BIG-IP APM 12.1.0 F5 BIG-IP Analytics 13.0 F5 BIG-IP Analytics 12.1.2 F5 BIG-IP Analytics 12.1.1 F5 BIG-IP Analytics 12.1.0 F5 BIG-IP AFM 13.0 F5 BIG-IP AFM 12.1.3 F5 BIG-IP AFM 12.1.2 F5 BIG-IP AFM 12.1.1 F5 BIG-IP AFM 12.1 HF2 F5 BIG-IP AFM 12.1 HF1 F5 BIG-IP AFM 12.1.0 F5 BIG-IP AAM 13.0 F5 BIG-IP AAM 12.1.3 F5 BIG-IP AAM 12.1.2 F5 BIG-IP AAM 12.1.1 F5 BIG-IP AAM 12.1 HF2 F5 BIG-IP AAM 12.1 HF1 F5 BIG-IP AAM 12.1.0
Not Vulnerable:	F5 BIG-IP WebSafe 13.1 F5 BIG-IP WebSafe 12.1.3.2 F5 BIG-IP PEM 13.1 F5 BIG-IP PEM 12.1.3.2 F5 BIG-IP LTM 13.1 F5 BIG-IP LTM 12.1.3.2 F5 BIG-IP Link Controller 13.1 F5 BIG-IP Link Controller 12.1.3.2 F5 BIG-IP ASM 13.1 F5 BIG-IP ASM 12.1.3.2 F5 BIG-IP APM 13.1 F5 BIG-IP APM 12.1.3.2 F5 BIG-IP AFM 13.1 F5 BIG-IP AFM 12.1.3.2 F5 BIG-IP AAM 13.1 F5 BIG-IP AAM 12.1.3.2

Multiple F5 BIG-IP Products CVE-2018-5509 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple F5 BIG-IP Products CVE-2018-5509 Remote Denial of Service Vulnerability

References:

• F5 BIG-IP Homepage (F5)
  
• K49440608: TMOS vulnerability CVE-2018-5509 (F5 Networks)