CVE-2018-15323 On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, in certain circumstances, when processing traffic through a Virtual Server with an associated MQTT profile, the TMM process may produce a core file and ta...
MediumCVSS 5.9
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, in certain circumstances, when processing traffic through a Virtual Server with an associated MQTT profile, the TMM process may produce a core file and take the configured HA action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| f5 big-ip local traffic manager | >= 13.0.0, <= 13.1.1.1 | No fix listed |
| f5 big-ip local traffic manager | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip advanced firewall manager | >= 13.0.0, <= 13.1.1.1 | No fix listed |
| f5 big-ip advanced firewall manager | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip application acceleration manager | >= 13.0.0, <= 13.1.1.1 | No fix listed |
| f5 big-ip application acceleration manager | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip analytics | >= 13.0.0, <= 13.1.1.1 | No fix listed |
| f5 big-ip analytics | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip access policy manager | >= 13.0.0, <= 13.1.1.1 | No fix listed |
| f5 big-ip access policy manager | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip protocol security module | >= 13.0.0, <= 13.1.1.1 | No fix listed |
| f5 big-ip protocol security module | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip domain name system | >= 13.0.0, <= 13.1.1.1 | No fix listed |
| f5 big-ip domain name system | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip edge gateway | >= 13.0.0, <= 13.1.1.1 | No fix listed |
| f5 big-ip edge gateway | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip fraud protection service | >= 13.0.0, <= 13.1.1.1 | No fix listed |
| f5 big-ip fraud protection service | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip global traffic manager | >= 13.0.0, <= 13.1.1.1 | No fix listed |
| f5 big-ip global traffic manager | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip link controller | >= 13.0.0, <= 13.1.1.1 | No fix listed |
| f5 big-ip link controller | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip policy enforcement manager | >= 13.0.0, <= 13.1.1.1 | No fix listed |
| f5 big-ip policy enforcement manager | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 big-ip webaccelerator | >= 13.0.0, <= 13.1.1.1 | No fix listed |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| f5 big-ip webaccelerator | >= 14.0.0, <= 14.0.0.2 | No fix listed |
| f5 BIG-IP (LTM, AAM,AFM, Analytics, APM ASM, Edge Gateway, FPS, PSM, Websafe) | = 14.0.0-14.0.0.2, 13.0.0-13.1.1.1 | No fix listed |
References
- support.f5.com vendor-advisory