Detections
Analytics

F5 Networks BIG-IP : DNS Express vulnerability (K45435121)

low Nessus Plugin ID 118666

Language:

Synopsis

The remote device is missing a vendor-supplied security patch.

Description

On F5 BIG-IP DNS 13.1.0-13.1.0.7, 12.1.3-12.1.3.5, DNS Express / DNS Zones accept NOTIFY messages on the management interface from source IP addresses not listed in the 'Allow NOTIFY From' configuration parameter when the db variable 'dnsexpress.notifyport' is set to any value other than the default of '0'. (CVE-2018-5538)

Impact

This vulnerability may allow a malicious actor to cause DNS Express to constantly check for updates. An update only occurs if the zone's serial number has changed.

Solution

Upgrade to one of the non-vulnerable versions listed in the F5 Solution K45435121.

See Also

https://my.f5.com/manage/s/article/K45435121

Plugin Details

Severity: Low

ID: 118666

File Name: f5_bigip_SOL45435121.nasl

Version: 1.4

Type: local

Published: 11/2/2018

Updated: 11/2/2023

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 1.4

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.2

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS Score Source: CVE-2018-5538

CVSS v3

Risk Factor: Low

Base Score: 3.7

Temporal Score: 3.2

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:f5:big-ip_domain_name_system, cpe:/h:f5:big-ip, cpe:/a:f5:big-ip_global_traffic_manager

Required KB Items: Host/local_checks_enabled, Host/BIG-IP/hotfix, Host/BIG-IP/modules, Host/BIG-IP/version, Settings/ParanoidReport

Exploit Ease: No known exploits are available

Patch Publication Date: 7/24/2018

Vulnerability Publication Date: 7/25/2018

Reference Information

CVE: CVE-2018-5538