Detections
Analytics

F5 Networks BIG-IP : Intel MCE vulnerability (K17269881)

medium Nessus Plugin ID 138230

Language:

Synopsis

The remote device is missing a vendor-supplied security patch.

Description

Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access. (CVE-2018-12207)

Impact

A privileged guest user may use this flaw to induce a hardware Machine Check Error (MCE) that halts the host processor and resultsin a denial-of-service (DoS) scenario.

This is a hardware issue and requires kernel updates to remediate.
This issue impacts all BIG-IP platforms using the following Intel processor families :

Xeon

Pentium Gold

Core X-series

Core i

Celeron G

The following BIG-IP platforms are vulnerable :

BIG-IP 2000s, 2200s, 4000s, 4200v, 5000s, 5050s, 5200v,5250v, 5250v fips, 7000s, 7200v , 7200v FIPS , 7250v series

BIG-IP 10000s, 10050s, 10055s, 10150s NEBS, 10200v, 10200v FIPS, 10200v SSL, 10250v, 10255v, 10350v, 10350v NEBS, 11050 NEBS, 12250vseries

BIG-IP iSeries platforms:i850, i2x00,i4x00, i5x00, i5820-DF, i7x00, i7x00-D2, i7820-DF, i10x00 / i10x00-D2, i11x00, i11x00-DS, i15x00

VIPRION B2100, VIPRION B2150 , VIPRION B2250, VIPRION B4300 , VIPRION B4340N

Enterprise Manager 4000

BIG-IQ 7000

The following BIG-IP platforms are not vulnerable :

BIG-IP 800, 1600, 3600, 3900, 4200, 4340, 6900 series

BIG-IP 8900, 8950, 1100, 11050, 11050 FIPS series

Solution

Upgrade to one of the non-vulnerable versions listed in the F5 Solution K17269881.

See Also

https://my.f5.com/manage/s/article/K17269881

Plugin Details

Severity: Medium

ID: 138230

File Name: f5_bigip_SOL17269881.nasl

Version: 1.7

Type: local

Published: 7/9/2020

Updated: 11/3/2023

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.0

CVSS v2

Risk Factor: Medium

Base Score: 4.9

Temporal Score: 3.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS Score Source: CVE-2018-12207

CVSS v3

Risk Factor: Medium

Base Score: 6.5

Temporal Score: 5.7

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:f5:big-ip_link_controller, cpe:/a:f5:big-ip_application_visibility_and_reporting, cpe:/a:f5:big-ip_domain_name_system, cpe:/a:f5:big-ip_policy_enforcement_manager, cpe:/h:f5:big-ip, cpe:/a:f5:big-ip_application_security_manager, cpe:/a:f5:big-ip_advanced_firewall_manager, cpe:/a:f5:big-ip_local_traffic_manager, cpe:/a:f5:big-ip_access_policy_manager, cpe:/a:f5:big-ip_global_traffic_manager, cpe:/a:f5:big-ip_application_acceleration_manager

Required KB Items: Host/local_checks_enabled, Host/BIG-IP/hotfix, Host/BIG-IP/modules, Host/BIG-IP/version, Settings/ParanoidReport

Exploit Ease: No known exploits are available

Patch Publication Date: 12/4/2019

Vulnerability Publication Date: 11/14/2019

Reference Information

CVE: CVE-2018-12207