PT-2016-6011
CVE-2016-4545
·
تاريخ النشر
2016-06-07
·
تاريخ التحديث
2016-06-09
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
F5 BIG-IP version 11.5.4
Description
The issue allows remote attackers to cause a denial of service, resulting in resource consumption and a Traffic Management Microkernel restart. This occurs when an SSL alert is sent during the handshake, and SSL profiles are enabled.
Recommendations
For F5 BIG-IP version 11.5.4, consider disabling SSL profiles as a temporary workaround to minimize the risk of exploitation. Restrict access to the SSL handshake process to prevent remote attackers from sending malicious SSL alerts.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾