CVE-2016-5024: Input Validation

Published Jan 3, 2017

Updated

Virtual servers in F5 BIG-IP systems 11.6.1 before 11.6.1 HF1 and 12.1.x before 12.1.2, when configured to parse RADIUS messages via an iRule, allow remote attackers to cause a denial of service (Traffic Management Microkernel restart) via crafted network traffic.

Affected Software

27 affected components

F5 Big-ip Local Traffic Manager=11.6.1

F5 Big-ip Local Traffic Manager=12.1.0

F5 Big-ip Local Traffic Manager=12.1.1

F5 Big-ip Application Acceleration Manager=11.6.1

F5 Big-ip Application Acceleration Manager=12.1.0

F5 Big-ip Application Acceleration Manager=12.1.1

F5 BIG-IP Advanced Firewall Manager=11.6.1

F5 BIG-IP Advanced Firewall Manager=12.1.0

F5 BIG-IP Advanced Firewall Manager=12.1.1

F5 BIG-IP Analytics=11.6.1

F5 BIG-IP Analytics=12.1.0

F5 BIG-IP Analytics=12.1.1

F5 BIG-IP Access Policy Manager=11.6.1

F5 BIG-IP Access Policy Manager=12.1.0

F5 BIG-IP Access Policy Manager=12.1.1

F5 BIG-IP Application Security Manager=11.6.1

F5 BIG-IP Application Security Manager=12.1.0

F5 BIG-IP Application Security Manager=12.1.1

F5 Big-ip Domain Name System=12.1.0

F5 Big-ip Domain Name System=12.1.1

F5 Big-ip Global Traffic Manager=11.6.1

F5 Big-ip Link Controller=11.6.1

F5 Big-ip Link Controller=12.1.0

F5 Big-ip Link Controller=12.1.1

F5 Big-ip Policy Enforcement Manager=11.6.1

F5 Big-ip Policy Enforcement Manager=12.1.0

F5 Big-ip Policy Enforcement Manager=12.1.1

Event History

Jan 3, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-5024?

CVE-2016-5024 is rated as a high severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2016-5024?

To fix CVE-2016-5024, upgrade your F5 BIG-IP system to a version that is 11.6.1 HF1 or later, or 12.1.2 or later.

What systems are affected by CVE-2016-5024?

CVE-2016-5024 affects F5 BIG-IP systems 11.6.1 before HF1 and 12.1.x before 12.1.2 that are configured to parse RADIUS messages via an iRule.

What type of attacks can CVE-2016-5024 enable?

CVE-2016-5024 can enable remote attackers to cause a denial of service through crafted network traffic.

What components of F5 BIG-IP are impacted by CVE-2016-5024?

CVE-2016-5024 impacts various components including Local Traffic Manager, Application Security Manager, and Access Policy Manager, among others.