The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the K000148255 advisory.

    CVE-2019-1000020libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb139961 onwards (version v2.8.0     onwards) contains a CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in     ISO9660 parser, archive_read_support_format_iso9660.c, read_CE()/parse_rockridge() that can result in DoS     by infinite loop. This attack appears to be exploitable via the victim opening a specially crafted ISO9660     file.CVE-2019-1000019libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9a757c1 onwards (release     v3.0.2 onwards) contains a CWE-125: Out-of-bounds Read vulnerability in 7zip decompression,     archive_read_support_format_7zip.c, header_bytes() that can result in a crash (denial of service). This     attack appears to be exploitable via the victim opening a specially crafted 7zip file.

Tenable has extracted the preceding description block directly from the F5 Networks BIG-IP security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

F5 Networks BIG-IP : libarchive vulnerabilities (K000148255)

medium Nessus Plugin ID 209710

Version 1.1