CVE-2018-15322
6.5
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD
Description
On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 6.0.0-6.0.1, 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, iWorkflow 2.0.1-2.3.0, or Enterprise Manager 3.1.1 a BIG-IP user granted with tmsh access may cause the BIG-IP system to experience denial-of-service (DoS) when the BIG-IP user uses the tmsh utility to run the edit cli preference command and proceeds to save the changes to another filename repeatedly. This action utilises storage space on the /var partition and when performed repeatedly causes the /var partition to be full.
Affected (71)
Products: F5: Big Ip Local Traffic Manager, Big Ip Advanced Firewall Manager, Big Ip Application Acceleration Manager, Big Ip Analytics, Big Ip Access Policy Manager, Big Ip Protocol Security Module, Big Ip Domain Name System, Big Ip Edge Gateway, Big Ip Fraud Protection Service, Big Ip Global Traffic Manager, Big Ip Link Controller, Big Ip Policy Enforcement Manager, Big Ip Webaccelerator, Enterprise Manager, Big Iq Centralized Management, Big Iq Cloud And Orchestration, Iworkflow
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.2.1 to 11.5.6 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.2.1 to 11.5.6 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.2.1 to 11.5.6 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.2.1 to 11.5.6 |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.2.1 to 11.5.6 |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.2.1 to 11.5.6 |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.2.1 to 11.5.6 |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.2.1 to 11.5.6 |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.2.1 to 11.5.6 |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.2.1 to 11.5.6 |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.2.1 to 11.5.6 |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.2.1 to 11.5.6 |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.2.1 to 11.5.6 |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Version 3.1.1 |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| From 5.0.0 to 5.4.0 |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.0.0 |
References (2)
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory
Timeline
No history available yet.