PT-2016-6011

CVE-2016-4545

·

Published

2016-06-07

·

Updated

2016-06-09

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions F5 BIG-IP version 11.5.4
Description The issue allows remote attackers to cause a denial of service, resulting in resource consumption and a Traffic Management Microkernel restart. This occurs when an SSL alert is sent during the handshake, and SSL profiles are enabled.
Recommendations For F5 BIG-IP version 11.5.4, consider disabling SSL profiles as a temporary workaround to minimize the risk of exploitation. Restrict access to the SSL handshake process to prevent remote attackers from sending malicious SSL alerts.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾