En bref
- CVE-2018-5743 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant big-ip access policy manager (f5), big-ip advanced firewall manager (f5), big-ip analytics (f5).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 6.4%, plus élevée que 93.7% des vulnérabilités.
- Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.
| Package | Affected versions | Patched versions |
|---|
| big-ip access policy manager | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.1.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.0
| No fix yet |
| big-ip advanced firewall manager | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.1.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.0
| No fix yet |
| big-ip analytics | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.0
| No fix yet |
| big-ip application acceleration manager | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.0
| No fix yet |
| big-ip application security manager | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.1
| No fix yet |
|
Description
By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit the number of simultaneous connections contained an error which could be exploited to grow the number of simultaneous connections beyond this limit. Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.6, 9.12.0 -> 9.12.4, 9.14.0. BIND 9 Supported Preview Edition versions 9.9.3-S1 -> 9.11.5-S3, and 9.11.5-S5. Versions 9.13.0 -> 9.13.7 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5743.
Autres vulnérabilités de big-ip access policy manager
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free