CVE-2018-5527: High severity F5 BIG-IP Access Policy Manager vulnerability
On BIG-IP 13.1.0-13.1.0.7, a remote attacker using undisclosed methods against virtual servers configured with a Client SSL or Server SSL profile that has the SSL Forward Proxy feature enabled can force the Traffic Management Microkernel (tmm) to leak memory. As a result, system memory usage increases over time, which may eventually cause a decrease in performance or a system reboot due to memory exhaustion.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
BIG-IPto a version that resolves this vulnerability.Fixed in 13.1.0-13.1.0.7 - Configuration
On BIG-IP virtual servers using Client SSL or Server SSL profiles, disable the SSL Forward Proxy feature to prevent tmm memory leaks.
BIG-IP (virtual servers with Client SSL or Server SSL profiles) SSL Forward Proxy feature = disabled
Event History
Frequently Asked Questions
What is CVE-2018-5527?
CVE-2018-5527 is a vulnerability on BIG-IP 13.1.0-13.1.0.7 that allows a remote attacker to force the Traffic Management Microkernel (tmm) to leak memory.
How does CVE-2018-5527 affect F5 products?
CVE-2018-5527 affects various F5 products, including BIG-IP Access Policy Manager, BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Domain Name System, BIG-IP Edge Gateway, BIG-IP Global Traffic Manager, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Webaccelerator, and BIG-IP Websafe versions 13.0.0 to 13.1.0.7.
What is the severity of CVE-2018-5527?
CVE-2018-5527 has a severity rating of 7.5 (High).
How can I fix the CVE-2018-5527 vulnerability?
To fix the CVE-2018-5527 vulnerability, upgrade your F5 products to a version higher than 13.1.0.7.
Where can I find more information about CVE-2018-5527?
You can find more information about CVE-2018-5527 at the following references: [Link 1](http://www.securitytracker.com/id/1041196), [Link 2](https://support.f5.com/csp/article/K20134942).