Multiple F5 BIG-IP Products CVE-2018-15320 Remote Denial of Service Vulnerability
BID:107475
Info
Multiple F5 BIG-IP Products CVE-2018-15320 Remote Denial of Service Vulnerability
| Bugtraq ID: | 107475 |
| Class: | Design Error |
| CVE: |
CVE-2018-15320 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 31 2018 12:00AM |
| Updated: | Oct 31 2018 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
F5 BIG-IP WebAccelerator 14.0 F5 BIG-IP WebAccelerator 13.1.1 F5 BIG-IP WebAccelerator 13.1 F5 BIG-IP WebAccelerator 13.0.1 F5 BIG-IP WebAccelerator 13.0 F5 BIG-IP WebAccelerator 13.1.0.8 F5 BIG-IP WebAccelerator 13.1.0.6 F5 BIG-IP WebAccelerator 13.1.0.5 F5 BIG-IP WebAccelerator 13.1.0.4 F5 BIG-IP PEM 14.0 F5 BIG-IP PEM 13.1.1 F5 BIG-IP PEM 13.1 F5 BIG-IP PEM 13.0.1 F5 BIG-IP PEM 13.0 F5 BIG-IP PEM 13.1.0.8 F5 BIG-IP PEM 13.1.0.6 F5 BIG-IP PEM 13.1.0.5 F5 BIG-IP PEM 13.1.0.4 F5 BIG-IP LTM 14.0 F5 BIG-IP LTM 13.1.1 F5 BIG-IP LTM 13.1 F5 BIG-IP LTM 13.0.1 F5 BIG-IP LTM 13.0 F5 BIG-IP LTM 13.1.0.8 F5 BIG-IP LTM 13.1.0.6 F5 BIG-IP LTM 13.1.0.5 F5 BIG-IP LTM 13.1.0.4 F5 BIG-IP Link Controller 14.0 F5 BIG-IP Link Controller 13.1.1 F5 BIG-IP Link Controller 13.1 F5 BIG-IP Link Controller 13.0.1 F5 BIG-IP Link Controller 13.0 F5 BIG-IP Link Controller 13.1.0.8 F5 BIG-IP Link Controller 13.1.0.6 F5 BIG-IP Link Controller 13.1.0.5 F5 BIG-IP Link Controller 13.1.0.4 F5 BIG-IP GTM 14.0 F5 BIG-IP GTM 13.1.1 F5 BIG-IP GTM 13.1 F5 BIG-IP GTM 13.0.1 F5 BIG-IP GTM 13.1.0.8 F5 BIG-IP GTM 13.1.0.6 F5 BIG-IP GTM 13.1.0.5 F5 BIG-IP GTM 13.1.0.4 F5 BIG-IP GTM 13.0.0 F5 BIG-IP FPS 14.0 F5 BIG-IP FPS 13.1.1 F5 BIG-IP FPS 13.1 F5 BIG-IP FPS 13.0.1 F5 BIG-IP FPS 13.0 F5 BIG-IP FPS 13.1.0.8 F5 BIG-IP Edge Gateway 14.0 F5 BIG-IP Edge Gateway 13.1.1 F5 BIG-IP Edge Gateway 13.1 F5 BIG-IP Edge Gateway 13.0.1 F5 BIG-IP Edge Gateway 13.1.0.6 F5 BIG-IP Edge Gateway 13.1.0.5 F5 BIG-IP Edge Gateway 13.0 F5 BIG-IP DNS 14.0 F5 BIG-IP DNS 13.1.1 F5 BIG-IP DNS 13.1 F5 BIG-IP DNS 13.0.1 F5 BIG-IP DNS 13.0 F5 BIG-IP DNS 13.1.0.8 F5 BIG-IP DNS 13.1.0.7 F5 BIG-IP DNS 13.1.0.6 F5 BIG-IP DNS 13.1.0.5 F5 BIG-IP DNS 13.1.0.4 F5 BIG-IP ASM 14.0 F5 BIG-IP ASM 13.1.1 F5 BIG-IP ASM 13.1 F5 BIG-IP ASM 13.0.1 F5 BIG-IP ASM 13.0 F5 BIG-IP ASM 13.1.0.8 F5 BIG-IP ASM 13.1.0.6 F5 BIG-IP ASM 13.1.0.5 F5 BIG-IP ASM 13.1.0.4 F5 BIG-IP ASM 13.1.0.2 F5 BIG-IP APM 14.0 F5 BIG-IP APM 13.1.1 F5 BIG-IP APM 13.1 F5 BIG-IP APM 13.0.1 F5 BIG-IP APM 13.0 F5 BIG-IP APM 13.1.0.8 F5 BIG-IP APM 13.1.0.6 F5 BIG-IP APM 13.1.0.5 F5 BIG-IP APM 13.1.0.4 F5 BIG-IP Analytics 14.0 F5 BIG-IP Analytics 13.1.1 F5 BIG-IP Analytics 13.1 F5 BIG-IP Analytics 13.0.1 F5 BIG-IP Analytics 13.0 F5 BIG-IP Analytics 13.1.0.8 F5 BIG-IP Analytics 13.1.0.6 F5 BIG-IP Analytics 13.1.0.5 F5 BIG-IP Analytics 13.1.0.4 F5 BIG-IP AFM 14.0 F5 BIG-IP AFM 13.1.1 F5 BIG-IP AFM 13.1 F5 BIG-IP AFM 13.0.1 F5 BIG-IP AFM 13.0 F5 BIG-IP AFM 13.1.0.8 F5 BIG-IP AFM 13.1.0.6 F5 BIG-IP AFM 13.1.0.5 F5 BIG-IP AFM 13.1.0.4 F5 BIG-IP AAM 14.0 F5 BIG-IP AAM 13.1.1 F5 BIG-IP AAM 13.1 F5 BIG-IP AAM 13.0.1 F5 BIG-IP AAM 13.0 F5 BIG-IP AAM 13.1.0.8 F5 BIG-IP AAM 13.1.0.6 F5 BIG-IP AAM 13.1.0.5 F5 BIG-IP AAM 13.1.0.4 |
| Not Vulnerable: |
F5 BIG-IP WebAccelerator 14.1 F5 BIG-IP WebAccelerator 14.0.0.3 F5 BIG-IP WebAccelerator 13.1.1.2 F5 BIG-IP PEM 14.1 F5 BIG-IP PEM 14.0.0.3 F5 BIG-IP PEM 13.1.1.2 F5 BIG-IP LTM 14.1 F5 BIG-IP LTM 14.0.0.3 F5 BIG-IP LTM 13.1.1.2 F5 BIG-IP Link Controller 14.1 F5 BIG-IP Link Controller 14.0.0.3 F5 BIG-IP Link Controller 13.1.1.2 F5 BIG-IP GTM 14.1 F5 BIG-IP GTM 14.0.0.3 F5 BIG-IP GTM 13.1.1.2 F5 BIG-IP FPS 14.1 F5 BIG-IP FPS 14.0.0.3 F5 BIG-IP FPS 13.1.1.2 F5 BIG-IP Edge Gateway 14.1 F5 BIG-IP Edge Gateway 14.0.0.3 F5 BIG-IP Edge Gateway 13.1.1.2 F5 BIG-IP DNS 14.1 F5 BIG-IP DNS 14.0.0.3 F5 BIG-IP DNS 13.1.1.2 F5 BIG-IP ASM 14.1 F5 BIG-IP ASM 14.0.0.3 F5 BIG-IP ASM 13.1.1.2 F5 BIG-IP APM 14.1 F5 BIG-IP APM 14.0.0.3 F5 BIG-IP APM 13.1.1.2 F5 BIG-IP Analytics 14.1 F5 BIG-IP Analytics 14.0.0.3 F5 BIG-IP AFM 14.1 F5 BIG-IP AFM 14.0.0.3 F5 BIG-IP AFM 13.1.1.2 F5 BIG-IP AAM 14.1 F5 BIG-IP AAM 14.0.0.3 F5 BIG-IP AAM 13.1.1.2 |
Discussion
Multiple F5 BIG-IP Products CVE-2018-15320 Remote Denial of Service Vulnerability
Multiple F5 BIG-IP Products are prone to a denial-of-service vulnerability.
An attacker can exploit this issue to cause a denial-of-service condition, denying service to legitimate users.
The following products and versions are vulnerable:
BIG-IP 14.0.0
BIG-IP 13.0.0 through 13.1.1
Multiple F5 BIG-IP Products are prone to a denial-of-service vulnerability.
An attacker can exploit this issue to cause a denial-of-service condition, denying service to legitimate users.
The following products and versions are vulnerable:
BIG-IP 14.0.0
BIG-IP 13.0.0 through 13.1.1
Exploit / POC
Multiple F5 BIG-IP Products CVE-2018-15320 Remote Denial of Service Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Multiple F5 BIG-IP Products CVE-2018-15320 Remote Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Multiple F5 BIG-IP Products CVE-2018-15320 Remote Denial of Service Vulnerability
References:
References: