NetSight
IP …
medium5.3

CVE-2018-5532

On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be resolved by the cache…

Impact

On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be resolved by the cache even after the parent server revokes the record, if the DNS Cache is receiving a stream of requests for the cached name.

Affected products

VendorProductAffected versions
F5Big-Ip Local Traffic Manager
from 11.2.1 through 11.5.6
from 11.6.0 through 11.6.3.1
from 12.1.0 through 12.1.2
Version 13.0.0
F5Big-Ip Application Acceleration Manager
from 11.2.1 through 11.5.6
from 11.6.0 through 11.6.3.1
from 12.1.0 through 12.1.2
Version 13.0.0
F5Big-Ip Advanced Firewall Manager
from 11.2.1 through 11.5.6
from 11.6.0 through 11.6.3.1
from 12.1.0 through 12.1.2
Version 13.0.0
F5Big-Ip Analytics
from 11.2.1 through 11.5.6
from 11.6.0 through 11.6.3.1
from 12.1.0 through 12.1.2
Version 13.0.0
F5Big-Ip Access Policy Manager
from 11.2.1 through 11.5.6
from 11.6.0 through 11.6.3.1
from 12.1.0 through 12.1.2
Version 13.0.0
F5Big-Ip Application Security Manager
from 10.1.0 through 11.5.6
from 11.6.0 through 11.6.3.1
from 12.1.0 through 12.1.2
Version 13.0.0
F5Big-Ip Domain Name System
from 11.2.1 through 11.5.6
from 11.6.0 through 11.6.3.1
from 12.1.0 through 12.1.2
Version 13.0.0
F5Big-Ip Edge Gateway
from 11.2.1 through 11.5.6
from 11.6.0 through 11.6.3.1
from 12.1.0 through 12.1.2
Version 13.0.0
F5Big-Ip Fraud Protection Service
from 11.2.1 through 11.5.6
from 11.6.0 through 11.6.3.1
from 12.1.0 through 12.1.2
Version 13.0.0
F5Big-Ip Global Traffic Manager
from 11.2.1 through 11.5.6
from 11.6.0 through 11.6.3.1
from 12.1.0 through 12.1.2
Version 13.0.0
F5Big-Ip Link Controller
from 11.2.1 through 11.5.6
from 11.6.0 through 11.6.3.1
from 12.1.0 through 12.1.2
Version 13.0.0
F5Big-Ip Policy Enforcement Manager
from 11.2.1 through 11.5.6
from 11.6.0 through 11.6.3.1
from 12.1.0 through 12.1.2
Version 13.0.0

References