Em resumo
- CVE-2018-5743 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta big-ip access policy manager (f5), big-ip advanced firewall manager (f5), big-ip analytics (f5).
- Chance de exploração nos próximos 30 dias (EPSS): 6.4%, maior que 93.7% das vulnerabilidades.
- Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.
| Package | Affected versions | Patched versions |
|---|
| big-ip access policy manager | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.1.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.0
| No fix yet |
| big-ip advanced firewall manager | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.1.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.0
| No fix yet |
| big-ip analytics | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.0
| No fix yet |
| big-ip application acceleration manager | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.0
| No fix yet |
| big-ip application security manager | = 15.0.0≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.4≥ 13.0.0, ≤ 13.1.1≥ 14.0.0, ≤ 14.1.1
| No fix yet |
|
Description
By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit the number of simultaneous connections contained an error which could be exploited to grow the number of simultaneous connections beyond this limit. Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.6, 9.12.0 -> 9.12.4, 9.14.0. BIND 9 Supported Preview Edition versions 9.9.3-S1 -> 9.11.5-S3, and 9.11.5-S5. Versions 9.13.0 -> 9.13.7 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5743.
Mais vulnerabilidades de big-ip access policy manager
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free