PT-2016-6011
CVE-2016-4545
·
Published
2016-06-07
·
Updated
2016-06-09
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
F5 BIG-IP version 11.5.4
Description
The issue allows remote attackers to cause a denial of service, resulting in resource consumption and a Traffic Management Microkernel restart. This occurs when an SSL alert is sent during the handshake, and SSL profiles are enabled.
Recommendations
For F5 BIG-IP version 11.5.4, consider disabling SSL profiles as a temporary workaround to minimize the risk of exploitation. Restrict access to the SSL handshake process to prevent remote attackers from sending malicious SSL alerts.
Found an issue in the description? Have something to add? Feel free to write us 👾