PT-2018-17008
CVE-2018-5514
·
Publicado
2018-05-02
·
Atualizado
2018-06-13
Descrição por
CVSS 3.1
7.5
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
F5 BIG-IP versions 13.1.0 through 13.1.0.5
Description
The issue allows maliciously crafted HTTP/2 request frames to cause a denial of service. This exposure is specific to the data plane for virtual servers when the HTTP2 profile is enabled. There is no control plane exposure to this issue.
Recommendations
For F5 BIG-IP versions 13.1.0 through 13.1.0.5, consider disabling the HTTP2 profile as a temporary workaround to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾