vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2018-5509

N/A
Published: March 22, 2018 at 06:00 PM UTC
Updated: June 17, 2026 at 02:00 AM UTC
15 products affected across 2 vendorsBig IP Access Policy ManagerBig IP Application Security ManagerBig IP Advanced Firewall Manager

Using BIG-IP (LTM, AAM, AFM, APM, ASM, Link Controller, PEM, WebSafe) by F5 Networks, Inc.?

Get instant alerts when new vulnerabilities affect BIG-IP (LTM, AAM, AFM, APM, ASM, Link Controller, PEM, WebSafe) - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 3%

Description

On F5 BIG-IP versions 13.0.0 or 12.1.0 - 12.1.3.1, when a specifically configured virtual server receives traffic of an undisclosed nature, TMM will crash and take the configured failover action, potentially causing a denial of service. The configuration which exposes this issue is not common and in general does not work when enabled in previous versions of BIG-IP. Starting in 12.1.0, BIG-IP will crash if the configuration which exposes this issue is enabled and the virtual server receives non TCP traffic. With the fix of this issue, additional configuration validation logic has been added to prevent this configuration from being applied to a virtual server. There is only data plane exposure to this issue with a non-standard configuration. There is no control plane exposure.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Big IP Access Policy Manager· F5
95%
12.1.0 ≤ v < 12.1.3.213.0.0 ≤ v < 13.1.0.4
Affected range stops below 12.1.3.2, so it looks safe — our inference, not a vendor statement
Affected range stops below 13.1.0.4, so it looks safe — our inference, not a vendor statement
Big IP Advanced Firewall Manager· F5
95%
12.1.0 ≤ v < 12.1.3.213.0.0 ≤ v < 13.1.0.4
Affected range stops below 12.1.3.2, so it looks safe — our inference, not a vendor statement
Affected range stops below 13.1.0.4, so it looks safe — our inference, not a vendor statement
Big IP Application Acceleration Manager· F5
95%
12.1.0 ≤ v < 12.1.3.213.0.0 ≤ v < 13.1.0.4
Affected range stops below 12.1.3.2, so it looks safe — our inference, not a vendor statement
Affected range stops below 13.1.0.4, so it looks safe — our inference, not a vendor statement
Big IP Application Security Manager· F5
95%
12.1.0 ≤ v < 12.3.1.213.0.0 ≤ v < 13.1.0.4
Affected range stops below 12.3.1.2, so it looks safe — our inference, not a vendor statement
Affected range stops below 13.1.0.4, so it looks safe — our inference, not a vendor statement
Big IP Link Controller· F5
95%
12.1.0 ≤ v < 12.1.3.213.0.0 ≤ v < 13.1.0.4
Affected range stops below 12.1.3.2, so it looks safe — our inference, not a vendor statement
Affected range stops below 13.1.0.4, so it looks safe — our inference, not a vendor statement
Big IP Local Traffic Manager· F5
95%
12.1.0 ≤ v < 12.1.3.213.0.0 ≤ v < 13.1.0.412.1.0 - 12.1.3.113.0.0
Affected range stops below 12.1.3.2, so it looks safe — our inference, not a vendor statement
Affected range stops below 13.1.0.4, so it looks safe — our inference, not a vendor statement
Big IP Policy Enforcement Manager· F5
95%
12.1.0 ≤ v < 12.1.3.213.0.0 ≤ v < 13.1.0.4
Affected range stops below 12.1.3.2, so it looks safe — our inference, not a vendor statement
Affected range stops below 13.1.0.4, so it looks safe — our inference, not a vendor statement
Big IP Websafe· F5
95%
1.0.0
BIG-IP Access Policy Manager· F5-networks
60%
12.1.0 - 12.1.3.113.0.0
BIG-IP Advanced Firewall Manager· F5-networks
60%
12.1.0 - 12.1.3.113.0.0

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (3)

VDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/103504
VDB Entryx_refsource_SECTRACKThird Party Advisory
Source: [email protected]
http://www.securitytracker.com/id/1040562
x_refsource_CONFIRMVendor Advisory
Source: [email protected]
https://support.f5.com/csp/article/K49440608

CVSS

7.8HIGH[email protected]
Confidentiality
NONE
Integrity
NONE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-20

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card