F5-K000150814: Low severity F5 BIG-IP (all modules)3 vulnerability
It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of F5-K000150814?
The severity of F5-K000150814 is classified as high due to its potential to allow an attacker to exhaust resources.
How do I fix F5-K000150814?
To fix F5-K000150814, update your F5 BIG-IP or BIG-IQ Centralized Management to a patched version that addresses this vulnerability.
What systems are affected by F5-K000150814?
F5-K000150814 affects specific versions of F5 BIG-IP and BIG-IQ Centralized Management software.
What type of attack is associated with F5-K000150814?
F5-K000150814 is associated with a denial of service attack that exploits excessive resource consumption.
Can F5-K000150814 affect both authoritative servers and resolvers?
Yes, F5-K000150814 can affect both the authoritative server and independent resolvers by exhausting their resources.