CVE-2018-5509

{"id": "CVE-2018-5509", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2018-03-22T18:29:00.793", "references": [{"url": "http://www.securityfocus.com/bid/103504", "tags": ["Third Party Advisory", "VDB Entry"], "source": "f5sirt@f5.com"}, {"url": "http://www.securitytracker.com/id/1040562", "tags": ["Third Party Advisory", "VDB Entry"], "source": "f5sirt@f5.com"}, {"url": "https://support.f5.com/csp/article/K49440608", "tags": ["Vendor Advisory"], "source": "f5sirt@f5.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "On F5 BIG-IP versions 13.0.0 or 12.1.0 - 12.1.3.1, when a specifically configured virtual server receives traffic of an undisclosed nature, TMM will crash and take the configured failover action, potentially causing a denial of service. The configuration which exposes this issue is not common and in general does not work when enabled in previous versions of BIG-IP. Starting in 12.1.0, BIG-IP will crash if the configuration which exposes this issue is enabled and the virtual server receives non TCP traffic. With the fix of this issue, additional configuration validation logic has been added to prevent this configuration from being applied to a virtual server. There is only data plane exposure to this issue with a non-standard configuration. There is no control plane exposure."}, {"lang": "es", "value": "En las versiones 13.0.0 o desde la 12.1.0 hasta la 12.1.3.1 de F5 BIG-IP, cuando un servidor virtual espec\u00edficamente configurado recibe tr\u00e1fico de naturaleza no revelada, TMM se cerrar\u00e1 inesperadamente y tomar\u00e1 la acci\u00f3n de conmutaci\u00f3n por error configurada. Esto podr\u00eda provocar una denegaci\u00f3n de servicio (DoS). La configuraci\u00f3n que expone este problema no es com\u00fan y, en general, no funciona cuando se habilita en versiones anteriores de BIG-IP. Desde la versi\u00f3n 12.1.0, BIG-IP se cerrar\u00e1 inesperadamente si la configuraci\u00f3n que expone este problema est\u00e1 habilitada y el servidor virtual recibe tr\u00e1fico de un tipo distinto a TCP. Con la soluci\u00f3n a este problema, se ha a\u00f1adido l\u00f3gica de validaci\u00f3n de configuraci\u00f3n adicional para evitar que se aplique esta configuraci\u00f3n en un servidor virtual. Solo hay exposici\u00f3n del plano de datos a este problema con una configuraci\u00f3n no est\u00e1ndar. No hay ninguna exposici\u00f3n del plano de control."}], "lastModified": "2018-04-20T17:10:04.260", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "67C67409-85E1-4E36-B19E-2F2873AC98CB", "versionEndExcluding": "12.1.3.2", "versionStartIncluding": "12.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "894DA18C-0B22-45B1-8677-8979F1143216", "versionEndExcluding": "13.1.0.4", "versionStartIncluding": "13.0.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4564801B-5F7C-4BD9-B5CA-BCE3B2105438", "versionEndExcluding": "12.1.3.2", "versionStartIncluding": "12.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "445A66D4-37C1-42A8-A1CA-1D1E2C25E1E2", "versionEndExcluding": "13.1.0.4", "versionStartIncluding": "13.0.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56A4DE5A-D7D7-42AC-BF6F-30DD69C25562", "versionEndExcluding": "12.1.3.2", "versionStartIncluding": "12.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C8DAACD-71E0-4A83-A7ED-14BE366ACD1D", "versionEndExcluding": "13.1.0.4", "versionStartIncluding": "13.0.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E2C0CEBF-95C3-4229-90D6-6EF4C6E359E9", "versionEndExcluding": "12.3.1.2", "versionStartIncluding": "12.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA630386-C3DC-404E-9011-8DA3CD2F5865", "versionEndExcluding": "13.1.0.4", "versionStartIncluding": "13.0.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C075721-75D0-4E80-9522-ECA6570B37E8", "versionEndExcluding": "12.1.3.2", "versionStartIncluding": "12.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B23C430B-7477-4060-B68A-19B2B441F5EE", "versionEndExcluding": "13.1.0.4", "versionStartIncluding": "13.0.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AAF6D974-BBE3-48F3-BCFD-29C2E249809C", "versionEndExcluding": "12.1.3.2", "versionStartIncluding": "12.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0330565-B391-4121-81EB-601BAEA7BD50", "versionEndExcluding": "13.1.0.4", "versionStartIncluding": "13.0.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F10F57F-67E5-4004-A0E7-033C561C6AC0", "versionEndExcluding": "12.1.3.2", "versionStartIncluding": "12.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED65A801-F4BE-4067-903E-8997A13FFEF9", "versionEndExcluding": "13.1.0.4", "versionStartIncluding": "13.0.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_websafe:1.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E6556BF-A50D-4872-BF81-9397A7ECEC9C"}], "operator": "OR"}]}], "sourceIdentifier": "f5sirt@f5.com"}