NetSight
IP …
high7.5

CVE-2018-5513

On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.3, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, a malformed TLS handshake causes TMM to crash leading to a di…

Impact

On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.3, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, a malformed TLS handshake causes TMM to crash leading to a disruption of service. This issue is only exposed on the data plane when Proxy SSL configuration is enabled. The control plane is not impacted by this issue.

Affected products

VendorProductAffected versions
F5Big-Ip Application Acceleration Manager
from 11.2.1 through 11.5.5
from 11.6.1 through 11.6.3
from 12.1.0 through 12.1.3
from 13.1.0 through 13.1.0.4
Version 13.0.0
F5Big-Ip Local Traffic Manager
from 11.2.1 through 11.5.5
from 11.6.1 through 11.6.3
from 12.1.0 through 12.1.3
from 13.1.0 through 13.1.0.4
Version 13.0.0
F5Big-Ip Advanced Firewall Manager
from 11.2.1 through 11.5.5
from 11.6.1 through 11.6.3
from 12.1.0 through 12.1.3
from 13.1.0 through 13.1.0.4
Version 13.0.0
F5Big-Ip Analytics
from 11.2.1 through 11.5.5
from 11.6.1 through 11.6.3
from 12.1.0 through 12.1.3
from 13.1.0 through 13.1.0.4
Version 13.0.0
F5Big-Ip Access Policy Manager
from 11.2.1 through 11.5.5
from 11.6.1 through 11.6.3
from 12.1.0 through 12.1.3
from 13.1.0 through 13.1.0.4
Version 13.0.0
F5Big-Ip Application Security Manager
from 11.2.1 through 11.5.5
from 11.6.1 through 11.6.3
from 12.1.0 through 12.1.3
from 13.1.0 through 13.1.0.4
Version 13.0.0
F5Big-Ip Domain Name System
from 11.2.1 through 11.5.5
from 11.6.1 through 11.6.3
from 12.1.0 through 12.1.3
from 13.1.0 through 13.1.0.4
Version 13.0.0
F5Big-Ip Edge Gateway
from 11.2.1 through 11.5.5
from 11.6.1 through 11.6.3
from 12.1.0 through 12.1.3
from 13.1.0 through 13.1.0.4
Version 13.0.0
F5Big-Ip Global Traffic Manager
from 11.2.1 through 11.5.5
from 11.6.1 through 11.6.3
from 12.1.0 through 12.1.3
from 13.1.0 through 13.1.0.4
Version 13.0.0
F5Big-Ip Link Controller
from 11.2.1 through 11.5.5
from 11.6.1 through 11.6.3
from 12.1.0 through 12.1.3
from 13.1.0 through 13.1.0.4
Version 13.0.0
F5Big-Ip Policy Enforcement Manager
from 11.2.1 through 11.5.5
from 11.6.1 through 11.6.3
from 12.1.0 through 12.1.3
from 13.1.0 through 13.1.0.4
Version 13.0.0
F5Big-Ip Webaccelerator
from 11.2.1 through 11.5.5
from 11.6.1 through 11.6.3
from 12.1.0 through 12.1.3
from 13.1.0 through 13.1.0.4
Version 13.0.0

Weakness classification

CWE-20

References