CVE-2018-5500: Medium severity F5 Big-ip Local Traffic Manager vulnerability

Q: What is CVE-2018-5500?

CVE-2018-5500 is a vulnerability found in F5 BIG-IP systems that leaks a small amount of memory through every Multipath TCP (MCTCP) connection established.

Q: What software is affected by CVE-2018-5500?

F5 BIG-IP systems running versions 11.6.1 - 11.6.2, 12.1.0 - 12.1.3.1, and 13.0.0 are affected by CVE-2018-5500.

Q: How severe is the CVE-2018-5500 vulnerability?

The severity of CVE-2018-5500 is rated as medium with a severity value of 5.9.

Q: How do I fix CVE-2018-5500?

To fix CVE-2018-5500, users should upgrade their F5 BIG-IP systems to a version that is not affected by the vulnerability.

Q: Where can I find more information about CVE-2018-5500?

More information about CVE-2018-5500 can be found at the following references: http://www.securityfocus.com/bid/103217 and https://support.f5.com/csp/article/K33211839

Published Mar 1, 2018

Updated

On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, every Multipath TCP (MCTCP) connection established leaks a small amount of memory. Virtual server using TCP profile with Multipath TCP (MCTCP) feature enabled will be affected by this issue.

Affected Software

39 affected components

F5 Big-ip Local Traffic Manager>=11.6.1<=11.6.2

F5 Big-ip Local Traffic Manager>=12.1.0<=12.1.3.1

F5 Big-ip Local Traffic Manager=13.0.0

F5 Big-ip Application Acceleration Manager>=11.6.1<=11.6.2

F5 Big-ip Application Acceleration Manager>=12.1.0<=12.1.3.1

F5 Big-ip Application Acceleration Manager=13.0.0

F5 BIG-IP Advanced Firewall Manager>=11.6.1<=11.6.2

F5 BIG-IP Advanced Firewall Manager>=12.1.0<=12.1.3.1

F5 BIG-IP Advanced Firewall Manager=13.0.0

F5 BIG-IP Analytics>=11.6.1<=11.6.2

F5 BIG-IP Analytics>=12.1.0<=12.1.3.1

F5 BIG-IP Analytics=13.0.0

F5 BIG-IP Access Policy Manager>=11.6.1<=11.6.2

F5 BIG-IP Access Policy Manager>=12.1.0<=12.1.3.1

F5 BIG-IP Access Policy Manager=13.0.0

F5 BIG-IP Application Security Manager>=11.6.1<=11.6.2

F5 BIG-IP Application Security Manager>=12.1.0<=12.1.3.1

F5 BIG-IP Application Security Manager=13.0.0

F5 BIG-IP DNS>=11.6.1<=11.6.2

F5 BIG-IP DNS>=12.1.0<=12.1.3.1

F5 BIG-IP DNS=13.0.0

F5 Big-ip Link Controller>=11.6.1<=11.6.2

F5 Big-ip Link Controller>=12.1.0<=12.1.3.1

F5 Big-ip Link Controller=13.0.0

F5 Big-ip Policy Enforcement Manager>=11.6.1<=11.6.2

F5 Big-ip Policy Enforcement Manager>=12.1.0<=12.1.3.1

F5 Big-ip Policy Enforcement Manager=13.0.0

F5 Big-ip Websafe>=11.6.1<=11.6.2

F5 Big-ip Websafe>=12.1.0<=12.1.3.1

F5 Big-ip Websafe=13.0.0

F5 BIG-IP Edge Gateway>=11.6.1<=11.6.2

F5 BIG-IP Edge Gateway>=12.1.0<=12.1.3.1

F5 BIG-IP Edge Gateway=13.0.0

F5 Big-ip Global Traffic Manager>=11.6.1<=11.6.2

F5 Big-ip Global Traffic Manager>=12.1.0<=12.1.3.1

F5 Big-ip Global Traffic Manager=13.0.0

F5 Big-ip Webaccelerator>=11.6.1<=11.6.2

F5 Big-ip Webaccelerator>=12.1.0<=12.1.3.1

F5 Big-ip Webaccelerator=13.0.0

Event History

Mar 1, 2018

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionWeakness

Data Sourced

via NVD·04:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2018-5500?

CVE-2018-5500 is a vulnerability found in F5 BIG-IP systems that leaks a small amount of memory through every Multipath TCP (MCTCP) connection established.

What software is affected by CVE-2018-5500?

F5 BIG-IP systems running versions 11.6.1 - 11.6.2, 12.1.0 - 12.1.3.1, and 13.0.0 are affected by CVE-2018-5500.

How severe is the CVE-2018-5500 vulnerability?