CVE-2018-5534: Input Validation

Q: What is the severity of CVE-2018-5534?

CVE-2018-5534 has a high severity level due to the potential for denial of service caused by TMM core dumps when processing SSL forward proxy traffic.

Q: How do I fix CVE-2018-5534?

To mitigate CVE-2018-5534, update F5 BIG-IP systems to a version that is not affected, typically any version after the vulnerable ones listed in the advisory.

Q: What products are affected by CVE-2018-5534?

CVE-2018-5534 affects multiple versions of F5 BIG-IP Local Traffic Manager, Application Acceleration Manager, Advanced Firewall Manager, and several others.

Q: What impact does CVE-2018-5534 have on my system?

Exploitation of CVE-2018-5534 may lead to a denial of service, potentially causing disruptions in traffic handling for affected applications.

Q: When was CVE-2018-5534 discovered?

CVE-2018-5534 was made public in July 2018, following its discovery in earlier versions of F5 BIG-IP software.

Published Jul 19, 2018

Updated

Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic.

Affected Software

65 affected components

F5 Big-ip Local Traffic Manager>=11.5.0<=11.5.6

F5 Big-ip Local Traffic Manager>=11.6.0<=11.6.3.1

F5 Big-ip Local Traffic Manager>=12.1.0<=12.1.3.1

F5 Big-ip Local Traffic Manager>=13.1.0<=13.1.0.5

F5 Big-ip Local Traffic Manager=13.0.0

F5 Big-ip Application Acceleration Manager>=11.5.0<=11.5.6

F5 Big-ip Application Acceleration Manager>=11.6.0<=11.6.3.1

F5 Big-ip Application Acceleration Manager>=12.1.0<=12.1.3.1

F5 Big-ip Application Acceleration Manager>=13.1.0<=13.1.0.5

F5 Big-ip Application Acceleration Manager=13.0.0

F5 BIG-IP Advanced Firewall Manager>=11.5.0<=11.5.6

F5 BIG-IP Advanced Firewall Manager>=11.6.0<=11.6.3.1

F5 BIG-IP Advanced Firewall Manager>=12.1.0<=12.1.3.1

F5 BIG-IP Advanced Firewall Manager>=13.1.0<=13.1.0.5

F5 BIG-IP Advanced Firewall Manager=13.0.0

F5 BIG-IP Analytics>=11.5.0<=11.5.6

F5 BIG-IP Analytics>=11.6.0<=11.6.3.1

F5 BIG-IP Analytics>=12.1.0<=12.1.3.1

F5 BIG-IP Analytics>=13.1.0<=13.1.0.5

F5 BIG-IP Analytics=13.0.0

F5 BIG-IP Access Policy Manager>=11.5.0<=11.5.6

F5 BIG-IP Access Policy Manager>=11.6.0<=11.6.3.1

F5 BIG-IP Access Policy Manager>=12.1.0<=12.1.3.1

F5 BIG-IP Access Policy Manager>=13.1.0<=13.1.0.5

F5 BIG-IP Access Policy Manager=13.0.0

F5 BIG-IP Application Security Manager>=11.5.0<=11.5.6

F5 BIG-IP Application Security Manager>=11.6.0<=11.6.3.1

F5 BIG-IP Application Security Manager>=12.1.0<=12.1.3.1

F5 BIG-IP Application Security Manager>=13.1.0<=13.1.0.5

F5 BIG-IP Application Security Manager=13.0.0

F5 Big-ip Domain Name System>=11.5.0<=11.5.6

F5 Big-ip Domain Name System>=11.6.0<=11.6.3.1

F5 Big-ip Domain Name System>=12.1.0<=12.1.3.1

F5 Big-ip Domain Name System>=13.1.0<=13.1.0.5

F5 Big-ip Domain Name System=13.0.0

F5 BIG-IP Edge Gateway>=11.5.0<=11.5.6

F5 BIG-IP Edge Gateway>=11.6.0<=11.6.3.1

F5 BIG-IP Edge Gateway>=12.1.0<=12.1.3.1

F5 BIG-IP Edge Gateway>=13.1.0<=13.1.0.5

F5 BIG-IP Edge Gateway=13.0.0

F5 Big-ip Fraud Protection Service>=11.5.0<=11.5.6

F5 Big-ip Fraud Protection Service>=11.6.0<=11.6.3.1

F5 Big-ip Fraud Protection Service>=12.1.0<=12.1.3.1

F5 Big-ip Fraud Protection Service>=13.1.0<=13.1.0.5

F5 Big-ip Fraud Protection Service=13.0.0

F5 Big-ip Global Traffic Manager>=11.5.0<=11.5.6

F5 Big-ip Global Traffic Manager>=11.6.0<=11.6.3.1

F5 Big-ip Global Traffic Manager>=12.1.0<=12.1.3.1

F5 Big-ip Global Traffic Manager>=13.1.0<=13.1.0.5

F5 Big-ip Global Traffic Manager=13.0.0

F5 Big-ip Link Controller>=11.5.0<=11.5.6

F5 Big-ip Link Controller>=11.6.0<=11.6.3.1

F5 Big-ip Link Controller>=12.1.0<=12.1.3.1

F5 Big-ip Link Controller>=13.1.0<=13.1.0.5

F5 Big-ip Link Controller=13.0.0

F5 Big-ip Policy Enforcement Manager>=11.5.0<=11.5.6

F5 Big-ip Policy Enforcement Manager>=11.6.0<=11.6.3.1

F5 Big-ip Policy Enforcement Manager>=12.1.0<=12.1.3.1

F5 Big-ip Policy Enforcement Manager>=13.1.0<=13.1.0.5

F5 Big-ip Policy Enforcement Manager=13.0.0

F5 Big-ip Webaccelerator>=11.5.0<=11.5.6

F5 Big-ip Webaccelerator>=11.6.0<=11.6.3.1

F5 Big-ip Webaccelerator>=12.1.0<=12.1.3.1

F5 Big-ip Webaccelerator>=13.1.0<=13.1.0.5

F5 Big-ip Webaccelerator=13.0.0

Event History

Jul 19, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-5534?

CVE-2018-5534 has a high severity level due to the potential for denial of service caused by TMM core dumps when processing SSL forward proxy traffic.

How do I fix CVE-2018-5534?

To mitigate CVE-2018-5534, update F5 BIG-IP systems to a version that is not affected, typically any version after the vulnerable ones listed in the advisory.

What products are affected by CVE-2018-5534?