CVE-2018-5509: f5 networks, inc. big-ip (ltm, aam, afm, apm, asm, link controller, pem, websafe) Improper Input Validation

Vulnerability summary

CVE-2018-5509 is a high (CVSS 7.8) Improper Input Validation vulnerability in f5 networks, inc. big-ip (ltm, aam, afm, apm, asm, link controller, pem, websafe). EPSS estimates a 2.76% chance of exploitation in the next 30 days, higher than 86% of scored vulnerabilities.

Timeline

1. 22-03-2018
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

On F5 BIG-IP versions 13.0.0 or 12.1.0 - 12.1.3.1, when a specifically configured virtual server receives traffic of an undisclosed nature, TMM will crash and take the configured failover action, potentially causing a denial of service. The configuration which exposes this issue is not common and in general does not work when enabled in previous versions of BIG-IP. Starting in 12.1.0, BIG-IP will crash if the configuration which exposes this issue is enabled and the virtual server receives non TCP traffic. With the fix of this issue, additional configuration validation logic has been added to prevent this configuration from being applied to a virtual server. There is only data plane exposure to this issue with a non-standard configuration. There is no control plane exposure.

• CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.