CVE-2018-5541: High severity f5 application security manager vulnerability

Q: What is the severity of CVE-2018-5541?

CVE-2018-5541 is categorized as a medium severity vulnerability due to excessive CPU usage.

Q: How do I fix CVE-2018-5541?

To fix CVE-2018-5541, upgrade your F5 BIG-IP ASM to a version beyond the affected ranges specified in the vulnerability.

Q: What systems are affected by CVE-2018-5541?

CVE-2018-5541 affects F5 BIG-IP ASM versions 11.5.1 to 11.5.6, 11.6.1 to 11.6.3, 12.1.0 to 12.1.3, and 13.0.0 to 13.1.0.1.

Q: What kind of impact can CVE-2018-5541 have?

CVE-2018-5541 can cause performance degradation and denial of service due to excessive CPU usage in the BIG-IP ASM bd process.

Q: When was CVE-2018-5541 disclosed?

CVE-2018-5541 was disclosed in early 2018 as a security vulnerability impacting certain versions of F5 BIG-IP ASM.

Published Jul 25, 2018

Updated

When F5 BIG-IP ASM 13.0.0-13.1.0.1, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.5.1-11.5.6 is processing HTTP requests, an unusually large number of parameters can cause excessive CPU usage in the BIG-IP ASM bd process.

Affected Software

4 affected components

F5 BIG-IP Application Security Manager>=11.5.1<=11.5.5

F5 BIG-IP Application Security Manager>=11.6.1<=11.6.3

F5 BIG-IP Application Security Manager>=12.1.0<=12.1.3

F5 BIG-IP Application Security Manager>=13.0.0<=13.1.0

Event History

Jul 25, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-5541?

CVE-2018-5541 is categorized as a medium severity vulnerability due to excessive CPU usage.

How do I fix CVE-2018-5541?

To fix CVE-2018-5541, upgrade your F5 BIG-IP ASM to a version beyond the affected ranges specified in the vulnerability.

What systems are affected by CVE-2018-5541?