PT-2018-16999
CVE-2018-5505
·
Published
2018-03-22
·
Updated
2019-10-03
Description by
CVSS 3.1
5.9
MediumMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
F5 BIG-IP versions 13.1.0 through 13.1.0.3
Description
The issue occurs when ASM and AVR are both provisioned and the virtual server is configured with a DNS profile, where the Protocol setting is set to TCP. This can cause TMM to restart while processing DNS requests.
Recommendations
For F5 BIG-IP versions 13.1.0 through 13.1.0.3, consider reconfiguring the virtual server to use a different protocol setting until a fix is available. As a temporary workaround, restrict the use of the DNS profile with TCP protocol to minimize the risk of TMM restarts.
Found an issue in the description? Have something to add? Feel free to write us 👾