cnvd - cnvd-2018-10104

cnvd-2018-10104

Vulnerability from cnvd

Title: 多款F5产品拒绝服务漏洞（CNVD-2018-10104）

Description:

F5 BIG-IP LTM等都是美国F5公司的产品。F5 BIG-IP LTM是一款本地流量管理器；BIG-IP AAM是一款应用程序加速管理器。

多款F5产品中存在安全漏洞。当运行host-only或bridged模式时，攻击者可借助root访问权限利用该漏洞造成同一主机上的相邻虚拟机重启并使之产生core文件。

Severity: 中

Patch Name: 多款F5产品拒绝服务漏洞（CNVD-2018-10104）的补丁

Patch Description:

F5 BIG-IP LTM等都是美国F5公司的产品。F5 BIG-IP LTM是一款本地流量管理器；BIG-IP AAM是一款应用程序加速管理器。

多款F5产品中存在安全漏洞。当运行host-only或bridged模式时，攻击者可借助root访问权限利用该漏洞造成同一主机上的相邻虚拟机重启并使之产生core文件。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新： https://support.f5.com/csp/article/K03165684

Reference: https://securitytracker.com/id/1040797

Impacted products

Name
['F5 BIG-IP LTM >=13.0.0，<=13.1.0.5', 'F5 BIG-IP LTM >=12.1.0，<=12.1.3', 'F5 BIG-IP AAM >=13.0.0，<=13.1.0.5', 'F5 BIG-IP AAM >=12.1.0，<=12.1.3', 'F5 BIG-IP AFM >=13.0.0，<=13.1.0.5', 'F5 BIG-IP AFM >=12.1.0，<=12.1.3', 'F5 BIG-IP Analytics >=13.0.0，<=13.1.0.5', 'F5 BIG-IP Analytics >=12.1.0，<=12.1.3', 'F5 BIG-IP APM >=13.0.0，<=13.1.0.5', 'F5 BIG-IP APM >=12.1.0，<=12.1.3', 'F5 BIG-IP ASM >=13.0.0，<=13.1.0.5', 'F5 BIG-IP ASM >=12.1.0，<=12.1.3', 'F5 BIG-IP DNS >=13.0.0，<=13.1.0.5', 'F5 BIG-IP DNS >=12.1.0，<=12.1.3', 'F5 BIG-IP Edge Gateway >=13.0.0，<=13.1.0.5', 'F5 BIG-IP Edge Gateway >=12.1.0，<=12.1.3', 'F5 BIG-IP GTM >=13.0.0，<=13.1.0.5', 'F5 BIG-IP GTM >=12.1.0，<=12.1.3', 'F5 BIG-IP Link Controller >=13.0.0，<=13.1.0.5', 'F5 BIG-IP Link Controller >=12.1.0，<=12.1.3', 'F5 BIG-IP PEM >=13.0.0，<=13.1.0.5', 'F5 BIG-IP PEM >=12.1.0，<=12.1.3', 'F5 BIG-IP WebAccelerator >=13.0.0，<=13.1.0.5', 'F5 BIG-IP WebAccelerator >=12.1.0，<=12.1.3', 'F5 WebSafe >=13.0.0，<=13.1.0.5', 'F5 WebSafe >=12.1.0，<=12.1.3']

Name

['F5 BIG-IP LTM >=13.0.0，<=13.1.0.5', 'F5 BIG-IP LTM >=12.1.0，<=12.1.3', 'F5 BIG-IP AAM >=13.0.0，<=13.1.0.5', 'F5 BIG-IP AAM >=12.1.0，<=12.1.3', 'F5 BIG-IP AFM >=13.0.0，<=13.1.0.5', 'F5 BIG-IP AFM >=12.1.0，<=12.1.3', 'F5 BIG-IP Analytics >=13.0.0，<=13.1.0.5', 'F5 BIG-IP Analytics >=12.1.0，<=12.1.3', 'F5 BIG-IP APM >=13.0.0，<=13.1.0.5', 'F5 BIG-IP APM >=12.1.0，<=12.1.3', 'F5 BIG-IP ASM >=13.0.0，<=13.1.0.5', 'F5 BIG-IP ASM >=12.1.0，<=12.1.3', 'F5 BIG-IP DNS >=13.0.0，<=13.1.0.5', 'F5 BIG-IP DNS >=12.1.0，<=12.1.3', 'F5 BIG-IP Edge Gateway >=13.0.0，<=13.1.0.5', 'F5 BIG-IP Edge Gateway >=12.1.0，<=12.1.3', 'F5 BIG-IP GTM >=13.0.0，<=13.1.0.5', 'F5 BIG-IP GTM >=12.1.0，<=12.1.3', 'F5 BIG-IP Link Controller >=13.0.0，<=13.1.0.5', 'F5 BIG-IP Link Controller >=12.1.0，<=12.1.3', 'F5 BIG-IP PEM >=13.0.0，<=13.1.0.5', 'F5 BIG-IP PEM >=12.1.0，<=12.1.3', 'F5 BIG-IP WebAccelerator >=13.0.0，<=13.1.0.5', 'F5 BIG-IP WebAccelerator >=12.1.0，<=12.1.3', 'F5 WebSafe >=13.0.0，<=13.1.0.5', 'F5 WebSafe >=12.1.0，<=12.1.3']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-5518"
    }
  },
  "description": "F5 BIG-IP LTM\u7b49\u90fd\u662f\u7f8e\u56fdF5\u516c\u53f8\u7684\u4ea7\u54c1\u3002F5 BIG-IP LTM\u662f\u4e00\u6b3e\u672c\u5730\u6d41\u91cf\u7ba1\u7406\u5668\uff1bBIG-IP AAM\u662f\u4e00\u6b3e\u5e94\u7528\u7a0b\u5e8f\u52a0\u901f\u7ba1\u7406\u5668\u3002\r\n\r\n\u591a\u6b3eF5\u4ea7\u54c1\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u5f53\u8fd0\u884chost-only\u6216bridged\u6a21\u5f0f\u65f6\uff0c\u653b\u51fb\u8005\u53ef\u501f\u52a9root\u8bbf\u95ee\u6743\u9650\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u540c\u4e00\u4e3b\u673a\u4e0a\u7684\u76f8\u90bb\u865a\u62df\u673a\u91cd\u542f\u5e76\u4f7f\u4e4b\u4ea7\u751fcore\u6587\u4ef6\u3002",
  "discovererName": "F5",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://support.f5.com/csp/article/K03165684",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-10104",
  "openTime": "2018-05-23",
  "patchDescription": "F5 BIG-IP LTM\u7b49\u90fd\u662f\u7f8e\u56fdF5\u516c\u53f8\u7684\u4ea7\u54c1\u3002F5 BIG-IP LTM\u662f\u4e00\u6b3e\u672c\u5730\u6d41\u91cf\u7ba1\u7406\u5668\uff1bBIG-IP AAM\u662f\u4e00\u6b3e\u5e94\u7528\u7a0b\u5e8f\u52a0\u901f\u7ba1\u7406\u5668\u3002\r\n\r\n\u591a\u6b3eF5\u4ea7\u54c1\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u5f53\u8fd0\u884chost-only\u6216bridged\u6a21\u5f0f\u65f6\uff0c\u653b\u51fb\u8005\u53ef\u501f\u52a9root\u8bbf\u95ee\u6743\u9650\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u540c\u4e00\u4e3b\u673a\u4e0a\u7684\u76f8\u90bb\u865a\u62df\u673a\u91cd\u542f\u5e76\u4f7f\u4e4b\u4ea7\u751fcore\u6587\u4ef6\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eF5\u4ea7\u54c1\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2018-10104\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "F5 BIG-IP LTM \u003e=13.0.0\uff0c\u003c=13.1.0.5",
      "F5 BIG-IP LTM \u003e=12.1.0\uff0c\u003c=12.1.3",
      "F5 BIG-IP AAM \u003e=13.0.0\uff0c\u003c=13.1.0.5",
      "F5 BIG-IP AAM \u003e=12.1.0\uff0c\u003c=12.1.3",
      "F5 BIG-IP AFM \u003e=13.0.0\uff0c\u003c=13.1.0.5",
      "F5 BIG-IP AFM \u003e=12.1.0\uff0c\u003c=12.1.3",
      "F5 BIG-IP Analytics \u003e=13.0.0\uff0c\u003c=13.1.0.5",
      "F5 BIG-IP Analytics \u003e=12.1.0\uff0c\u003c=12.1.3",
      "F5 BIG-IP APM \u003e=13.0.0\uff0c\u003c=13.1.0.5",
      "F5 BIG-IP APM \u003e=12.1.0\uff0c\u003c=12.1.3",
      "F5 BIG-IP ASM \u003e=13.0.0\uff0c\u003c=13.1.0.5",
      "F5 BIG-IP ASM \u003e=12.1.0\uff0c\u003c=12.1.3",
      "F5 BIG-IP DNS \u003e=13.0.0\uff0c\u003c=13.1.0.5",
      "F5 BIG-IP DNS \u003e=12.1.0\uff0c\u003c=12.1.3",
      "F5 BIG-IP Edge Gateway \u003e=13.0.0\uff0c\u003c=13.1.0.5",
      "F5 BIG-IP Edge Gateway \u003e=12.1.0\uff0c\u003c=12.1.3",
      "F5 BIG-IP GTM \u003e=13.0.0\uff0c\u003c=13.1.0.5",
      "F5 BIG-IP GTM \u003e=12.1.0\uff0c\u003c=12.1.3",
      "F5 BIG-IP Link Controller \u003e=13.0.0\uff0c\u003c=13.1.0.5",
      "F5 BIG-IP Link Controller \u003e=12.1.0\uff0c\u003c=12.1.3",
      "F5 BIG-IP PEM \u003e=13.0.0\uff0c\u003c=13.1.0.5",
      "F5 BIG-IP PEM \u003e=12.1.0\uff0c\u003c=12.1.3",
      "F5 BIG-IP WebAccelerator \u003e=13.0.0\uff0c\u003c=13.1.0.5",
      "F5 BIG-IP WebAccelerator \u003e=12.1.0\uff0c\u003c=12.1.3",
      "F5 WebSafe \u003e=13.0.0\uff0c\u003c=13.1.0.5",
      "F5 WebSafe \u003e=12.1.0\uff0c\u003c=12.1.3"
    ]
  },
  "referenceLink": "https://securitytracker.com/id/1040797",
  "serverity": "\u4e2d",
  "submitTime": "2018-05-02",
  "title": "\u591a\u6b3eF5\u4ea7\u54c1\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2018-10104\uff09"
}

CVE-2018-5518 (GCVE-0-2018-5518)

Vulnerability from cvelistv5

Published

2018-05-02 13:00

Modified

2024-09-16 19:00

Severity ?

CWE

Summary

On F5 BIG-IP 13.0.0-13.1.0.5 or 12.0.0-12.1.3.3, malicious root users with access to a VCMP guest can cause a disruption of service on adjacent VCMP guests running on the same host. Exploiting this vulnerability causes the vCMPd process on the adjacent VCMP guest to restart and produce a core file. This issue is only exploitable on a VCMP guest which is operating in "host-only" or "bridged" mode. VCMP guests which are "isolated" are not impacted by this issue and do not provide mechanism to exploit the vulnerability. Guests which are deployed in "Appliance Mode" may be impacted however the exploit is not possible from an Appliance Mode guest. To exploit this vulnerability root access on a guest system deployed as "host-only" or "bridged" mode is required.

References

▼	URL	Tags
	https://support.f5.com/csp/article/K03165684	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1040797	vdb-entry, x_refsource_SECTRACK

Impacted products

	Vendor	Product	Version
	F5 Networks, Inc.	BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe)	Version: 13.0.0-13.1.0.5 Version: 12.0.0-12.1.3.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T05:40:50.617Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K03165684"
          },
          {
            "name": "1040797",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040797"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe)",
          "vendor": "F5 Networks, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "13.0.0-13.1.0.5"
            },
            {
              "status": "affected",
              "version": "12.0.0-12.1.3.3"
            }
          ]
        }
      ],
      "datePublic": "2018-05-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "On F5 BIG-IP 13.0.0-13.1.0.5 or 12.0.0-12.1.3.3, malicious root users with access to a VCMP guest can cause a disruption of service on adjacent VCMP guests running on the same host. Exploiting this vulnerability causes the vCMPd process on the adjacent VCMP guest to restart and produce a core file. This issue is only exploitable on a VCMP guest which is operating in \"host-only\" or \"bridged\" mode. VCMP guests which are \"isolated\" are not impacted by this issue and do not provide mechanism to exploit the vulnerability. Guests which are deployed in \"Appliance Mode\" may be impacted however the exploit is not possible from an Appliance Mode guest. To exploit this vulnerability root access on a guest system deployed as \"host-only\" or \"bridged\" mode is required."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "DoS",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-05-03T09:57:01",
        "orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
        "shortName": "f5"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K03165684"
        },
        {
          "name": "1040797",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040797"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "f5sirt@f5.com",
          "DATE_PUBLIC": "2018-05-01T00:00:00",
          "ID": "CVE-2018-5518",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe)",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "13.0.0-13.1.0.5"
                          },
                          {
                            "version_value": "12.0.0-12.1.3.3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "F5 Networks, Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "On F5 BIG-IP 13.0.0-13.1.0.5 or 12.0.0-12.1.3.3, malicious root users with access to a VCMP guest can cause a disruption of service on adjacent VCMP guests running on the same host. Exploiting this vulnerability causes the vCMPd process on the adjacent VCMP guest to restart and produce a core file. This issue is only exploitable on a VCMP guest which is operating in \"host-only\" or \"bridged\" mode. VCMP guests which are \"isolated\" are not impacted by this issue and do not provide mechanism to exploit the vulnerability. Guests which are deployed in \"Appliance Mode\" may be impacted however the exploit is not possible from an Appliance Mode guest. To exploit this vulnerability root access on a guest system deployed as \"host-only\" or \"bridged\" mode is required."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "DoS"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.f5.com/csp/article/K03165684",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K03165684"
            },
            {
              "name": "1040797",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040797"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
    "assignerShortName": "f5",
    "cveId": "CVE-2018-5518",
    "datePublished": "2018-05-02T13:00:00Z",
    "dateReserved": "2018-01-12T00:00:00",
    "dateUpdated": "2024-09-16T19:00:38.214Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted