CVE-2018-5530: High severity riverbed steelapp traffic manager vulnerability
Published Jul 25, 2018
·Updated
F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.1 virtual servers with HTTP/2 profiles enabled are vulnerable to "HPACK Bomb".
Affected Software
27 affected components
F5 Big-ip Local Traffic Manager>=11.6.0<=11.6.3.1
F5 Big-ip Local Traffic Manager>=12.1.0<=12.1.3.5
F5 Big-ip Local Traffic Manager>=13.0.0<=13.1.0.5
F5 Big-ip Application Acceleration Manager>=11.6.0<=11.6.3.1
F5 Big-ip Application Acceleration Manager>=12.1.0<=12.1.3.5
F5 Big-ip Application Acceleration Manager>=13.0.0<=13.1.0.5
F5 BIG-IP Advanced Firewall Manager>=11.6.0<=11.6.3.1
F5 BIG-IP Advanced Firewall Manager>=12.1.0<=12.1.3.5
F5 BIG-IP Advanced Firewall Manager>=13.0.0<=13.1.0.5
F5 BIG-IP Analytics>=11.6.0<=11.6.3.1
F5 BIG-IP Analytics>=12.1.0<=12.1.3.5
F5 BIG-IP Analytics>=13.0.0<=13.1.0.5
F5 BIG-IP Access Policy Manager>=11.6.0<=11.6.3.1
F5 BIG-IP Access Policy Manager>=12.1.0<=12.1.3.5
F5 BIG-IP Access Policy Manager>=13.0.0<=13.1.0.5
F5 BIG-IP Application Security Manager>=11.6.0<=11.6.3.1
F5 BIG-IP Application Security Manager>=12.1.0<=12.1.3.5
F5 BIG-IP Application Security Manager>=13.0.0<=13.1.0.5
F5 BIG-IP Edge Gateway>=11.6.0<=11.6.3.1
F5 BIG-IP Edge Gateway>=12.1.0<=12.1.3.5
F5 BIG-IP Edge Gateway>=13.0.0<=13.1.0.5
F5 Big-ip Policy Enforcement Manager>=11.6.0<=11.6.3.1
F5 Big-ip Policy Enforcement Manager>=12.1.0<=12.1.3.5
F5 Big-ip Policy Enforcement Manager>=13.0.0<=13.1.0.5
F5 Big-ip Websafe>=11.6.0<=11.6.3.1
F5 Big-ip Websafe>=12.1.0<=12.1.3.5
F5 Big-ip Websafe>=13.0.0<=13.1.0.5
Event History
Jul 25, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2018-5530?
CVE-2018-5530 is a vulnerability in F5 BIG-IP virtual servers with HTTP/2 profiles enabled called "HPACK Bomb".
2
Which versions of F5 BIG-IP are affected by CVE-2018-5530?
F5 BIG-IP versions 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, and 11.6.0-11.6.3.1 are affected.
3
How severe is CVE-2018-5530?
CVE-2018-5530 has a severity score of 7.5 (high).
4
How does the "HPACK Bomb" vulnerability affect F5 BIG-IP?
The "HPACK Bomb" vulnerability affects F5 BIG-IP virtual servers with HTTP/2 profiles enabled, allowing an attacker to send specially crafted packets that can cause excessive CPU usage and potentially lead to a denial of service.
5
How can I fix CVE-2018-5530?
To fix CVE-2018-5530, upgrade your F5 BIG-IP software to a version that is not vulnerable.