| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|---|---|
| big-ip access policy manager | = 11.6.2= 12.1.2= 13.0.0≥ 11.6.1, < 11.6.2≥ 12.1.0, < 12.1.2 | 11.6.212.1.2 |
| big-ip advanced firewall manager | = 11.6.2= 12.1.2= 13.0.0≥ 11.6.1, < 11.6.2≥ 12.1.0, < 12.1.2 | 11.6.212.1.2 |
| big-ip advanced web application firewall | = 11.6.2= 12.1.2= 13.0.0≥ 11.6.1, < 11.6.2≥ 12.1.0, < 12.1.2 | 11.6.212.1.2 |
| big-ip analytics | = 11.6.2= 12.1.2= 13.0.0≥ 11.6.1, < 11.6.2≥ 12.1.0, < 12.1.2 | 11.6.212.1.2 |
| big-ip application acceleration manager | = 11.6.2= 12.1.2= 13.0.0≥ 11.6.1, < 11.6.2≥ 12.1.0, < 12.1.2 | 11.6.212.1.2 |
| big-ip application security manager | = 11.6.2= 12.1.2= 13.0.0≥ 11.6.1, < 11.6.2≥ 12.1.0, < 12.1.2 | 11.6.212.1.2 |
| big-ip ddos hybrid defender | = 11.6.2= 12.1.2= 13.0.0≥ 11.6.1, < 11.6.2≥ 12.1.0, < 12.1.2 | 11.6.212.1.2 |
| big-ip domain name system | = 11.6.2= 12.1.2= 13.0.0≥ 11.6.1, < 11.6.2≥ 12.1.0, < 12.1.2 | 11.6.212.1.2 |
| big-ip fraud protection service | = 11.6.2= 12.1.2= 13.0.0≥ 11.6.1, < 11.6.2≥ 12.1.0, < 12.1.2 | 11.6.212.1.2 |
| big-ip global traffic manager | = 11.6.2= 12.1.2= 13.0.0≥ 11.6.1, < 11.6.2≥ 12.1.0, < 12.1.2 | 11.6.212.1.2 |
| big-ip link controller | = 11.6.2= 12.1.2= 13.0.0≥ 11.6.1, < 11.6.2≥ 12.1.0, < 12.1.2 | 11.6.212.1.2 |
| big-ip local traffic manager | = 11.6.2= 12.1.2= 13.0.0≥ 11.6.1, < 11.6.2≥ 12.1.0, < 12.1.2 | 11.6.212.1.2 |
| big-ip policy enforcement manager | = 11.6.2= 12.1.2= 13.0.0≥ 11.6.1, < 11.6.2≥ 12.1.0, < 12.1.2 | 11.6.212.1.2 |
| ssl orchestrator | = 11.6.2= 12.1.2= 13.0.0≥ 11.6.1, < 11.6.2≥ 12.1.0, < 12.1.2 | 11.6.212.1.2 |
In versions 13.0.0-13.0.0 HF2, 12.1.0-12.1.2 HF1, and 11.6.1-11.6.2, BIG-IP platforms with Cavium Nitrox SSL hardware acceleration cards, a Virtual Server configured with a Client SSL profile, and using Anonymous (ADH) or Ephemeral (DHE) Diffie-Hellman key exchange and Single DH use option not enabled in the options list may be vulnerable to crafted SSL/TLS Handshakes that may result with a PMS (Pre-Master Secret) that starts in a 0 byte and may lead to a recovery of plaintext messages as BIG-IP TLS/SSL ADH/DHE sends different error messages acting as an oracle. Similar error messages when PMS starts with 0 byte coupled with very precise timing measurement observation may also expose this vulnerability.
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí