En resumen
- CVE-2018-5743 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a big-ip access policy manager (f5), big-ip advanced firewall manager (f5), big-ip analytics (f5).
- Probabilidad de explotación en los próximos 30 días (EPSS): 6.4%, mayor que el 93.7% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
| Package | Affected versions | Patched versions |
|---|
| big-ip access policy manager | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.1.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.0
| No fix yet |
| big-ip advanced firewall manager | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.1.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.0
| No fix yet |
| big-ip analytics | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.0
| No fix yet |
| big-ip application acceleration manager | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.0
| No fix yet |
| big-ip application security manager | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.1
| No fix yet |
|
Description
By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit the number of simultaneous connections contained an error which could be exploited to grow the number of simultaneous connections beyond this limit. Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.6, 9.12.0 -> 9.12.4, 9.14.0. BIND 9 Supported Preview Edition versions 9.9.3-S1 -> 9.11.5-S3, and 9.11.5-S5. Versions 9.13.0 -> 9.13.7 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5743.
Más vulnerabilidades de big-ip access policy manager
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free