CVE-2018-15319: Input Validation
On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with the non-default "normalize URI" configuration options used in iRules and/or BIG-IP LTM policies.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-15319?
CVE-2018-15319 is a vulnerability that affects F5 Big-ip Local Traffic Manager, F5 BIG-IP Advanced Firewall Manager, F5 Big-ip Application Acceleration Manager, F5 BIG-IP Analytics, F5 BIG-IP Access Policy Manager, F5 Big-ip Protocol Security Module, F5 Big-ip Domain Name System, F5 Big-ip Edge Gateway, F5 Big-ip Fraud Protection Service, F5 Big-ip Global Traffic Manager, F5 Big-ip Link Controller, F5 Big-ip Policy Enforcement Manager, and F5 Big-ip Webaccelerator. It allows an attacker to cause the Traffic Management Microkernel (TMM) to restart by sending malicious requests to virtual servers with an HTTP profile using the non-default "normalize URI" configuration options used in iRules and/or BIG-IP LTM policies.
How severe is CVE-2018-15319?
CVE-2018-15319 has a severity value of 7.5, which is considered high.
How can I fix CVE-2018-15319?
To fix CVE-2018-15319, you should upgrade your F5 Big-IP software to version 12.1.3.7, 13.1.1.2, or 14.0.0.3 or later.
Where can I find more information about CVE-2018-15319?
You can find more information about CVE-2018-15319 on the SecurityFocus website and the F5 support website.
What CWE is associated with CVE-2018-15319?
CVE-2018-15319 is associated with CWE-20, which is Improper Input Validation.