Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j3p8-q7hc-2x2w

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 11.6.1, under limited circumstances connections handled by a Virtual Server with an associated SOCKS profile may not be properly cleaned up, potentially leading to resource starvation. Connections may be left in the connection table which then can only be removed by restarting TMM. Over time this may lead to the BIG-IP being unable to process further connections.

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 11.6.1, under limited circumstances connections handled by a Virtual Server with an associated SOCKS profile may not be properly cleaned up, potentially leading to resource starvation. Connections may be left in the connection table which then can only be removed by restarting TMM. Over time this may lead to the BIG-IP being unable to process further connections.

EPSS

Процентиль: 85%
0.02438
Низкий

7.5 High

CVSS3

Дефекты

CWE-459

Связанные уязвимости

CVSS3: 7.5
nvd
больше 8 лет назад

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 11.6.1, under limited circumstances connections handled by a Virtual Server with an associated SOCKS profile may not be properly cleaned up, potentially leading to resource starvation. Connections may be left in the connection table which then can only be removed by restarting TMM. Over time this may lead to the BIG-IP being unable to process further connections.

CVSS3: 7.5
fstec
больше 8 лет назад

Уязвимость прокси-сервера SOCKS средства защиты BIG-IP Websafe, системы контроля и управления сетевым трафиком BIG-IP Policy Enforcement Manager, средства защиты приложений BIG-IP Application Security Manager, системы балансировки локального трафика BIG-IP Local Traffic Manager, системы балансировки интернет-трафика BIG-IP Link Controller, средства доставки приложений BIG-IP Application Acceleration Manager, межсетевого экрана BIG-IP Advanced Firewall Manager и средства контроля доступа и удаленной аутентификации BIG-IP Access Policy Manager, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 85%
0.02438
Низкий

7.5 High

CVSS3

Дефекты

CWE-459