Vulnerability CVE-2018-15311

Vulnerability Name:

CVE-2018-15311 (CCN-151276)

Assigned:

2018-10-10

Published:

2018-10-10

Updated:

2019-10-03

Summary:

When F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing specially crafted TCP traffic with the Large Receive Offload (LRO) feature enabled, TMM may crash, leading to a failover event. This vulnerability is not exposed unless LRO is enabled, so most affected customers will be on 13.1.x. LRO has been available since 11.4.0 but is not enabled by default until 13.1.0.

CVSS v3 Severity:

5.9 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
5.2 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): High

3.7 Low (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L)
3.2 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Low

CVSS v2 Severity:

4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

2.6 Low (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): High Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): None Availibility (A): Partial

Vulnerability Type:

CWE-noinfo

Vulnerability Consequences:

Denial of Service

References:

Source: MITRE
Type: CNA
CVE-2018-15311

Source: XF
Type: UNKNOWN
f5-cve201815311-dos(151276)

Source: CCN
Type: F5 Security Advisory K07550539
TMM with LRO vulnerability CVE-2018-15311

Source: CONFIRM
Type: Mitigation, Vendor Advisory
https://support.f5.com/csp/article/K07550539

Vulnerable Configuration:

Configuration 1:

cpe:/a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* (Version >= 11.5.1 and <= 11.5.6)

OR cpe:/a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* (Version >= 11.6.0.0 and <= 11.6.3.2)

OR cpe:/a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* (Version >= 12.1.0.0 and <= 12.1.3.5)

OR cpe:/a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* (Version >= 13.0.0.0 and <= 13.1.0.5)

Configuration 2:

cpe:/a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* (Version >= 11.5.1 and <= 11.5.6)

OR cpe:/a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* (Version >= 11.6.0.0 and <= 11.6.3.2)

OR cpe:/a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* (Version >= 12.1.0.0 and <= 12.1.3.5)

OR cpe:/a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* (Version >= 13.0.0.0 and <= 13.1.0.5)

Configuration 3:

cpe:/a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* (Version >= 11.5.1 and <= 11.5.6)

OR cpe:/a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* (Version >= 11.6.0.0 and <= 11.6.3.2)

OR cpe:/a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* (Version >= 12.1.0.0 and <= 12.1.3.5)

OR cpe:/a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* (Version >= 13.0.0.0 and <= 13.1.0.5)

Configuration 4:

cpe:/a:f5:big-ip_analytics:*:*:*:*:*:*:*:* (Version >= 11.5.1 and <= 11.5.6)

OR cpe:/a:f5:big-ip_analytics:*:*:*:*:*:*:*:* (Version >= 11.6.0.0 and <= 11.6.3.2)

OR cpe:/a:f5:big-ip_analytics:*:*:*:*:*:*:*:* (Version >= 12.1.0.0 and <= 12.1.3.5)

OR cpe:/a:f5:big-ip_analytics:*:*:*:*:*:*:*:* (Version >= 13.0.0.0 and <= 13.1.0.5)

Configuration 5:

cpe:/a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* (Version >= 11.5.1 and <= 11.5.6)

OR cpe:/a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* (Version >= 11.6.0.0 and <= 11.6.3.2)

OR cpe:/a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* (Version >= 12.1.0.0 and <= 12.1.3.5)

OR cpe:/a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* (Version >= 13.0.0.0 and <= 13.1.0.5)

Configuration 6:

cpe:/a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* (Version >= 11.5.1 and <= 11.5.6)

OR cpe:/a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* (Version >= 11.6.0.0 and <= 11.6.3.2)

OR cpe:/a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* (Version >= 12.1.0.0 and <= 12.1.3.5)

OR cpe:/a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* (Version >= 13.0.0.0 and <= 13.1.0.5)

Configuration 7:

cpe:/a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* (Version >= 11.5.1 and <= 11.5.6)

OR cpe:/a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* (Version >= 11.6.0.0 and <= 11.6.3.2)

OR cpe:/a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* (Version >= 12.1.0.0 and <= 12.1.3.5)

OR cpe:/a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* (Version >= 13.0.0.0 and <= 13.1.0.5)

Configuration 8:

cpe:/a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* (Version >= 11.5.1 and <= 11.5.6)

OR cpe:/a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* (Version >= 11.6.0.0 and <= 11.6.3.2)

OR cpe:/a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* (Version >= 12.1.0.0 and <= 12.1.3.5)

OR cpe:/a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* (Version >= 13.0.0.0 and <= 13.1.0.5)

Configuration 9:

cpe:/a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* (Version >= 11.5.1 and <= 11.5.6)

OR cpe:/a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* (Version >= 11.6.0.0 and <= 11.6.3.2)

OR cpe:/a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* (Version >= 12.1.0.0 and <= 12.1.3.5)

OR cpe:/a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* (Version >= 13.0.0.0 and <= 13.1.0.5)

Configuration 10:

cpe:/a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* (Version >= 11.5.1 and <= 11.5.6)

OR cpe:/a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* (Version >= 11.6.0.0 and <= 11.6.3.2)

OR cpe:/a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* (Version >= 12.1.0.0 and <= 12.1.3.5)

OR cpe:/a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* (Version >= 13.0.0.0 and <= 13.1.0.5)

Configuration 11:

cpe:/a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* (Version >= 11.5.1 and <= 11.5.6)

OR cpe:/a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* (Version >= 11.6.0.0 and <= 11.6.3.2)

OR cpe:/a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* (Version >= 12.1.0.0 and <= 12.1.3.5)

OR cpe:/a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* (Version >= 13.0.0.0 and <= 13.1.0.5)

Configuration 12:

cpe:/a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* (Version >= 11.5.1 and <= 11.5.6)

OR cpe:/a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* (Version >= 11.6.0.0 and <= 11.6.3.2)

OR cpe:/a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* (Version >= 12.1.0.0 and <= 12.1.3.5)

OR cpe:/a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* (Version >= 13.0.0.0 and <= 13.1.0.5)

Configuration 13:

cpe:/a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:* (Version >= 11.5.1 and <= 11.5.6)

OR cpe:/a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:* (Version >= 11.6.0.0 and <= 11.6.3.2)

OR cpe:/a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:* (Version >= 12.1.0.0 and <= 12.1.3.5)

OR cpe:/a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:* (Version >= 13.0.0.0 and <= 13.1.0.5)

Configuration CCN 1:

cpe:/a:f5:big-ip:11.5.1:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip:11.6.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip:12.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip:13.0.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip:13.1.0:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip:12.1.3.7:*:*:*:*:*:*:*

OR cpe:/a:f5:big-ip:11.6.3:*:*:*:*:*:*:*

Denotes that component is vulnerable

BACK