CVE-2018-15317 In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an attacker sending specially crafted SSL records to a SSL Virtual Server will cause corruption in the SSL data struct...
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an attacker sending specially crafted SSL records to a SSL Virtual Server will cause corruption in the SSL data structures leading to intermittent decrypt BAD_RECORD_MAC errors. Clients will be unable to access the application load balanced by a virtual server with an SSL profile until tmm is restarted.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| f5 big-ip local traffic manager | >= 11.2.1, <= 11.5.6 | No fix listed |
| f5 big-ip local traffic manager | >= 11.6.0, <= 11.6.3.2 | No fix listed |
| f5 big-ip local traffic manager | >= 12.1.0, <= 12.1.3.5 | No fix listed |
| f5 big-ip local traffic manager | >= 13.0.0, <= 13.1.0.7 | No fix listed |
| f5 big-ip local traffic manager | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip advanced firewall manager | >= 11.2.1, <= 11.5.6 | No fix listed |
| f5 big-ip advanced firewall manager | >= 11.6.0, <= 11.6.3.2 | No fix listed |
| f5 big-ip advanced firewall manager | >= 12.1.0, <= 12.1.3.5 | No fix listed |
| f5 big-ip advanced firewall manager | >= 13.0.0, <= 13.1.0.7 | No fix listed |
| f5 big-ip advanced firewall manager | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip application acceleration manager | >= 11.2.1, <= 11.5.6 | No fix listed |
| f5 big-ip application acceleration manager | >= 11.6.0, <= 11.6.3.2 | No fix listed |
| f5 big-ip application acceleration manager | >= 12.1.0, <= 12.1.3.5 | No fix listed |
| f5 big-ip application acceleration manager | >= 13.0.0, <= 13.1.0.7 | No fix listed |
| f5 big-ip application acceleration manager | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip analytics | >= 11.2.1, <= 11.5.6 | No fix listed |
| f5 big-ip analytics | >= 11.6.0, <= 11.6.3.2 | No fix listed |
| f5 big-ip analytics | >= 12.1.0, <= 12.1.3.5 | No fix listed |
| f5 big-ip analytics | >= 13.0.0, <= 13.1.0.7 | No fix listed |
| f5 big-ip analytics | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip access policy manager | >= 11.2.1, <= 11.5.6 | No fix listed |
| f5 big-ip access policy manager | >= 11.6.0, <= 11.6.3.2 | No fix listed |
| f5 big-ip access policy manager | >= 12.1.0, <= 12.1.3.5 | No fix listed |
| f5 big-ip access policy manager | >= 13.0.0, <= 13.1.0.7 | No fix listed |
| f5 big-ip access policy manager | >= 14.0.0, <= 14.0.0.2 | No fix listed |
Show 41 more
| Product | Affected versions | Fixed in |
|---|---|---|
| f5 big-ip protocol security module | >= 11.2.1, <= 11.5.6 | No fix listed |
| f5 big-ip protocol security module | >= 11.6.0, <= 11.6.3.2 | No fix listed |
| f5 big-ip protocol security module | >= 12.1.0, <= 12.1.3.5 | No fix listed |
| f5 big-ip protocol security module | >= 13.0.0, <= 13.1.0.7 | No fix listed |
| f5 big-ip protocol security module | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip domain name system | >= 11.2.1, <= 11.5.6 | No fix listed |
| f5 big-ip domain name system | >= 11.6.0, <= 11.6.3.2 | No fix listed |
| f5 big-ip domain name system | >= 12.1.0, <= 12.1.3.5 | No fix listed |
| f5 big-ip domain name system | >= 13.0.0, <= 13.1.0.7 | No fix listed |
| f5 big-ip domain name system | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip edge gateway | >= 11.2.1, <= 11.5.6 | No fix listed |
| f5 big-ip edge gateway | >= 11.6.0, <= 11.6.3.2 | No fix listed |
| f5 big-ip edge gateway | >= 12.1.0, <= 12.1.3.5 | No fix listed |
| f5 big-ip edge gateway | >= 13.0.0, <= 13.1.0.7 | No fix listed |
| f5 big-ip edge gateway | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip fraud protection service | >= 11.2.1, <= 11.5.6 | No fix listed |
| f5 big-ip fraud protection service | >= 11.6.0, <= 11.6.3.2 | No fix listed |
| f5 big-ip fraud protection service | >= 12.1.0, <= 12.1.3.5 | No fix listed |
| f5 big-ip fraud protection service | >= 13.0.0, <= 13.1.0.7 | No fix listed |
| f5 big-ip fraud protection service | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip global traffic manager | >= 11.2.1, <= 11.5.6 | No fix listed |
| f5 big-ip global traffic manager | >= 11.6.0, <= 11.6.3.2 | No fix listed |
| f5 big-ip global traffic manager | >= 12.1.0, <= 12.1.3.5 | No fix listed |
| f5 big-ip global traffic manager | >= 13.0.0, <= 13.1.0.7 | No fix listed |
| f5 big-ip global traffic manager | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip link controller | >= 11.2.1, <= 11.5.6 | No fix listed |
| f5 big-ip link controller | >= 11.6.0, <= 11.6.3.2 | No fix listed |
| f5 big-ip link controller | >= 12.1.0, <= 12.1.3.5 | No fix listed |
| f5 big-ip link controller | >= 13.0.0, <= 13.1.0.7 | No fix listed |
| f5 big-ip link controller | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip policy enforcement manager | >= 11.2.1, <= 11.5.6 | No fix listed |
| f5 big-ip policy enforcement manager | >= 11.6.0, <= 11.6.3.2 | No fix listed |
| f5 big-ip policy enforcement manager | >= 12.1.0, <= 12.1.3.5 | No fix listed |
| f5 big-ip policy enforcement manager | >= 13.0.0, <= 13.1.0.7 | No fix listed |
| f5 big-ip policy enforcement manager | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip webaccelerator | >= 11.2.1, <= 11.5.6 | No fix listed |
| f5 big-ip webaccelerator | >= 11.6.0, <= 11.6.3.2 | No fix listed |
| f5 big-ip webaccelerator | >= 12.1.0, <= 12.1.3.5 | No fix listed |
| f5 big-ip webaccelerator | >= 13.0.0, <= 13.1.0.7 | No fix listed |
| f5 big-ip webaccelerator | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) | = 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, 11.2.1-11.5.6 | No fix listed |
References
- support.f5.com mitigation vendor-advisory
- support.f5.com