medium5.9
CVE-2014-4024
SSL virtual servers in F5 BIG-IP systems 10.x before 10.2.4 HF9, 11.x before 11.2.1 HF12, 11.3.0 before HF10, 11.4.0 before HF8, 11.4.1 before HF5, 11.5.0 befo…
Impact
SSL virtual servers in F5 BIG-IP systems 10.x before 10.2.4 HF9, 11.x before 11.2.1 HF12, 11.3.0 before HF10, 11.4.0 before HF8, 11.4.1 before HF5, 11.5.0 before HF5, and 11.5.1 before HF5, when used with third-party Secure Sockets Layer (SSL) accelerator cards, might allow remote attackers to have unspecified impact via a timing side-channel attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F5 | Big-Ip Local Traffic Manager | from 10.0.0 through 10.2.4 from 11.0.0 through 11.5.1 |
| F5 | Big-Ip Application Acceleration Manager | from 11.4.0 through 11.5.1 |
| F5 | Big-Ip Advanced Firewall Manager | from 11.3.0 through 11.5.1 |
| F5 | Big-Ip Analytics | from 11.0.0 through 11.5.1 |
| F5 | Big-Ip Access Policy Manager | from 10.1.0 through 10.2.4 from 11.0.0 through 11.5.1 |
| F5 | Big-Ip Application Security Manager | from 10.0.0 through 10.2.4 from 11.0.0 through 11.5.1 |
| F5 | Big-Ip Edge Gateway | from 10.1.0 through 10.2.4 from 11.0.0 through 11.3.0 |
| F5 | Big-Ip Global Traffic Manager | from 10.0.0 through 10.2.4 from 11.0.0 through 11.5.1 |
| F5 | Big-Ip Link Controller | from 10.0.0 through 10.2.4 from 11.0.0 through 11.5.1 |
| F5 | Big-Ip Policy Enforcement Manager | from 11.3.0 through 11.5.1 |
| F5 | Big-Ip Protocol Security Module | from 10.0.0 through 10.2.4 from 11.0.0 through 11.4.1 |
| F5 | Big-Ip Webaccelerator | from 10.0.0 through 10.2.4 from 11.0.0 through 11.3.0 |