PT-2018-17001

CVE-2018-5507

·

تاريخ النشر

2018-04-13

·

تاريخ التحديث

2019-10-03

الوصف من

CVSS 3.1
7.5
عالية
المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.1 through 11.5.5 F5 BIG-IP versions 11.6.1 through 11.6.2 F5 BIG-IP versions 12.1.0 through 12.1.3.1 F5 BIG-IP version 13.0.0
Description The issue affects vCMP guests running on VIPRION 2100, 4200, and 4300 series blades, where they cannot correctly decrypt ciphertext from established SSL sessions with small MTU.
Recommendations For F5 BIG-IP versions 11.5.1 through 11.5.5, update to a version that includes the necessary fix to correctly handle SSL decryption for small MTU sessions. For F5 BIG-IP versions 11.6.1 through 11.6.2, update to a version that includes the necessary fix to correctly handle SSL decryption for small MTU sessions. For F5 BIG-IP versions 12.1.0 through 12.1.3.1, update to a version that includes the necessary fix to correctly handle SSL decryption for small MTU sessions. For F5 BIG-IP version 13.0.0, update to a version that includes the necessary fix to correctly handle SSL decryption for small MTU sessions.
قابلية الاستغلال
إصلاح
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾