CVE-2018-15318

In BIG-IP 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, or 12.1.3.4-12.1.3.6, If an MPTCP connection receives an abort signal while the initial flow is not the primary flow, the initial flow will remain after the closing procedure is complete. TMM may restart and produce a core file as a result of this condition.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
f5CNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 68%
VendorProductVersion
f5big-ip_local_traffic_manager
12.1.3.4 ≤
𝑥
≤ 12.1.3.6
f5big-ip_local_traffic_manager
13.0.0 ≤
𝑥
≤ 13.1.1.1
f5big-ip_local_traffic_manager
14.0.0 ≤
𝑥
≤ 14.0.0.2
f5big-ip_advanced_firewall_manager
12.1.3.4 ≤
𝑥
≤ 12.1.3.6
f5big-ip_advanced_firewall_manager
13.0.0 ≤
𝑥
≤ 13.1.1.1
f5big-ip_advanced_firewall_manager
14.0.0 ≤
𝑥
≤ 14.0.0.2
f5big-ip_application_acceleration_manager
12.1.3.4 ≤
𝑥
≤ 12.1.3.6
f5big-ip_application_acceleration_manager
13.0.0 ≤
𝑥
≤ 13.1.1.1
f5big-ip_application_acceleration_manager
14.0.0 ≤
𝑥
≤ 14.0.0.2
f5big-ip_analytics
12.1.3.4 ≤
𝑥
≤ 12.1.3.6
f5big-ip_analytics
13.0.0 ≤
𝑥
≤ 13.1.1.1
f5big-ip_analytics
14.0.0 ≤
𝑥
≤ 14.0.0.2
f5big-ip_access_policy_manager
12.1.3.4 ≤
𝑥
≤ 12.1.3.6
f5big-ip_access_policy_manager
13.0.0 ≤
𝑥
≤ 13.1.1.1
f5big-ip_access_policy_manager
14.0.0 ≤
𝑥
≤ 14.0.0.2
f5big-ip_protocol_security_module
12.1.3.4 ≤
𝑥
≤ 12.1.3.6
f5big-ip_protocol_security_module
13.0.0 ≤
𝑥
≤ 13.1.1.1
f5big-ip_protocol_security_module
14.0.0 ≤
𝑥
≤ 14.0.0.2
f5big-ip_domain_name_system
12.1.3.4 ≤
𝑥
≤ 12.1.3.6
f5big-ip_domain_name_system
13.0.0 ≤
𝑥
≤ 13.1.1.1
f5big-ip_domain_name_system
14.0.0 ≤
𝑥
≤ 14.0.0.2
f5big-ip_edge_gateway
12.1.3.4 ≤
𝑥
≤ 12.1.3.6
f5big-ip_edge_gateway
13.0.0 ≤
𝑥
≤ 13.1.1.1
f5big-ip_edge_gateway
14.0.0 ≤
𝑥
≤ 14.0.0.2
f5big-ip_fraud_protection_service
12.1.3.4 ≤
𝑥
≤ 12.1.3.6
f5big-ip_fraud_protection_service
13.0.0 ≤
𝑥
≤ 13.1.1.1
f5big-ip_fraud_protection_service
14.0.0 ≤
𝑥
≤ 14.0.0.2
f5big-ip_global_traffic_manager
12.1.3.4 ≤
𝑥
≤ 12.1.3.6
f5big-ip_global_traffic_manager
13.0.0 ≤
𝑥
≤ 13.1.1.1
f5big-ip_global_traffic_manager
14.0.0 ≤
𝑥
≤ 14.0.0.2
f5big-ip_link_controller
12.1.3.4 ≤
𝑥
≤ 12.1.3.6
f5big-ip_link_controller
13.0.0 ≤
𝑥
≤ 13.1.1.1
f5big-ip_link_controller
14.0.0 ≤
𝑥
≤ 14.0.0.2
f5big-ip_policy_enforcement_manager
12.1.3.4 ≤
𝑥
≤ 12.1.3.6
f5big-ip_policy_enforcement_manager
13.0.0 ≤
𝑥
≤ 13.1.1.1
f5big-ip_policy_enforcement_manager
14.0.0 ≤
𝑥
≤ 14.0.0.2
f5big-ip_webaccelerator
12.1.3.4 ≤
𝑥
≤ 12.1.3.6
f5big-ip_webaccelerator
13.0.0 ≤
𝑥
≤ 13.1.1.1
f5big-ip_webaccelerator
14.0.0 ≤
𝑥
≤ 14.0.0.2
𝑥
= Vulnerable software versions