CVE-2018-5532

moderate-risk
Published 2018-07-19

On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be resolved by the cache even after the parent server revokes the record, if the DNS Cache is receiving a stream of requests for the cached name.

Do I need to act?

-
0.39% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.3/10 Medium
NETWORK / LOW complexity

Affected Products (20)

Affected Vendors

F5

References (4)

Third Party Advisory http://www.securitytracker.com/id/1041345
Vendor Advisory https://support.f5.com/csp/article/K48224824
Third Party Advisory http://www.securitytracker.com/id/1041345
Vendor Advisory https://support.f5.com/csp/article/K48224824
43
/ 100
moderate-risk
Severity 21/34 · High
Exploitability 1/34 · Minimal
Exposure 21/34 · High