Kurz gesagt
- CVE-2018-5743 ist eine Schwachstelle (HOCH (CVSS 7.5)) in big-ip access policy manager (f5), big-ip advanced firewall manager (f5), big-ip analytics (f5).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 6.4%, höher als bei 93.7% aller Schwachstellen.
- Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.
| Package | Affected versions | Patched versions |
|---|
| big-ip access policy manager | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.1.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.0
| No fix yet |
| big-ip advanced firewall manager | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.1.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.0
| No fix yet |
| big-ip analytics | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.0
| No fix yet |
| big-ip application acceleration manager | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.0
| No fix yet |
| big-ip application security manager | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.1
| No fix yet |
|
Description
By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit the number of simultaneous connections contained an error which could be exploited to grow the number of simultaneous connections beyond this limit. Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.6, 9.12.0 -> 9.12.4, 9.14.0. BIND 9 Supported Preview Edition versions 9.9.3-S1 -> 9.11.5-S3, and 9.11.5-S5. Versions 9.13.0 -> 9.13.7 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5743.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free