F5 Networks BIG-IP : TMM with HTTP/2 vulnerability (K45320419)

high Nessus Plugin ID 118664

Language:

Synopsis

The remote device is missing a vendor-supplied security patch.

Description

Maliciously crafted HTTP/2 request frames can lead to denial of service. There is data plane exposure for virtual servers when the HTTP2 profile is enabled. There is no control plane exposure to this issue. (CVE-2018-5514)

Impact

The BIG-IP system may temporarily fail to process traffic as it recovers from a Traffic Management Microkernel (TMM) restart, and devices configured as a high availability (HA) pair may fail over.

Solution

Upgrade to one of the non-vulnerable versions listed in the F5 Solution K45320419.

Plugin Details

Severity: High

ID: 118664

File Name: f5_bigip_SOL45320419.nasl

Version: 1.7

Type: local

Family: F5 Networks Local Security Checks

Published: 11/2/2018

Updated: 11/2/2023

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS Score Source: CVE-2018-5514

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:f5:big-ip_access_policy_manager, cpe:/a:f5:big-ip_advanced_firewall_manager, cpe:/a:f5:big-ip_application_acceleration_manager, cpe:/a:f5:big-ip_application_security_manager, cpe:/a:f5:big-ip_link_controller, cpe:/a:f5:big-ip_local_traffic_manager, cpe:/a:f5:big-ip_policy_enforcement_manager, cpe:/a:f5:big-ip_webaccelerator, cpe:/h:f5:big-ip

Required KB Items: Host/local_checks_enabled, Host/BIG-IP/hotfix, Host/BIG-IP/modules, Host/BIG-IP/version

Exploit Ease: No known exploits are available

Patch Publication Date: 4/30/2018

Vulnerability Publication Date: 5/2/2018

Reference Information

CVE: CVE-2018-5514

Detections

Analytics