PT-2016-6011
CVE-2016-4545
·
Publicado
2016-06-07
·
Atualizado
2016-06-09
Descrição por
CVSS 3.1
7.5
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
F5 BIG-IP version 11.5.4
Description
The issue allows remote attackers to cause a denial of service, resulting in resource consumption and a Traffic Management Microkernel restart. This occurs when an SSL alert is sent during the handshake, and SSL profiles are enabled.
Recommendations
For F5 BIG-IP version 11.5.4, consider disabling SSL profiles as a temporary workaround to minimize the risk of exploitation. Restrict access to the SSL handshake process to prevent remote attackers from sending malicious SSL alerts.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾