René Helmke 7791f18b51 bootstrap
2023-05-16 16:09:41 +02:00

565 lines
20 KiB
JSON

{
"id": "CVE-2018-5532",
"sourceIdentifier": "f5sirt@f5.com",
"published": "2018-07-19T14:29:00.573",
"lastModified": "2019-10-03T00:03:26.223",
"vulnStatus": "Analyzed",
"descriptions": [
{
"lang": "en",
"value": "On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be resolved by the cache even after the parent server revokes the record, if the DNS Cache is receiving a stream of requests for the cached name."
},
{
"lang": "es",
"value": "En F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1 o 11.2.1-11.5.6, un nombre de dominio cacheado con la DNS Cache de TMM podr\u00eda ser resuelto por la cach\u00e9 incluso despu\u00e9s de que el servidor padre revoque el registro, siempre y cuando el DNS Cache recibe un flujo de peticiones para el nombre en cach\u00e9."
}
],
"metrics": {
"cvssMetricV30": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.0",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM"
},
"exploitabilityScore": 3.9,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE",
"baseScore": 5.0
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.2.1",
"versionEndIncluding": "11.5.6",
"matchCriteriaId": "C0740491-CFC6-4D53-A39F-3244710282D0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.6.0",
"versionEndIncluding": "11.6.3.1",
"matchCriteriaId": "0329D778-511D-4AA4-BD93-4440A43A39F1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.1.0",
"versionEndIncluding": "12.1.2",
"matchCriteriaId": "48AEF668-8ABE-4A09-B45B-AB30B7A6464B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "BA7D64DC-7271-4617-BD46-99C8246779CA"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.2.1",
"versionEndIncluding": "11.5.6",
"matchCriteriaId": "C47559FB-EC85-4A3A-B967-0BD37934B33D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.6.0",
"versionEndIncluding": "11.6.3.1",
"matchCriteriaId": "16DC6150-D461-421F-848A-6FE723B428F8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.1.0",
"versionEndIncluding": "12.1.2",
"matchCriteriaId": "6CAB3D2D-F589-41AB-A68A-8AFA8760E394"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.2.1",
"versionEndIncluding": "11.5.6",
"matchCriteriaId": "88880F08-386C-4BC3-952D-DD1665D8B1EB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.6.0",
"versionEndIncluding": "11.6.3.1",
"matchCriteriaId": "F69377CD-D4A6-4523-8975-327C4D95E7A5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.1.0",
"versionEndIncluding": "12.1.2",
"matchCriteriaId": "F3C3362F-1251-4E7B-B8CB-BBE7344A915E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.2.1",
"versionEndIncluding": "11.5.6",
"matchCriteriaId": "B3EDF519-7610-4223-BBD7-B75438ACD8B2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.6.0",
"versionEndIncluding": "11.6.3.1",
"matchCriteriaId": "A976CDD1-81CB-42B2-8D6F-62D581089C4C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.1.0",
"versionEndIncluding": "12.1.2",
"matchCriteriaId": "A7E33F47-378B-4077-AA3E-6EBED04D3609"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_analytics:13.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "34D75E7F-B65F-421D-92EE-6B20756019C2"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.2.1",
"versionEndIncluding": "11.5.6",
"matchCriteriaId": "D1C0F266-7321-4BBC-B5C6-8D25DCC1715F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.6.0",
"versionEndIncluding": "11.6.3.1",
"matchCriteriaId": "932E1FB1-D9BA-4DBD-8EEF-00A97B8D22D8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.1.0",
"versionEndIncluding": "12.1.2",
"matchCriteriaId": "E6A76187-6118-4A9D-9F7C-0C9D3931BF42"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "BCF89E7C-806E-4800-BAA9-0225433B6C56"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "10.1.0",
"versionEndIncluding": "11.5.6",
"matchCriteriaId": "524FE953-8052-4BD7-8DCA-83591D4159C8"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.6.0",
"versionEndIncluding": "11.6.3.1",
"matchCriteriaId": "B487CBD2-1615-47DF-8C3B-A3B7E7DAB73A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.1.0",
"versionEndIncluding": "12.1.2",
"matchCriteriaId": "FE82B01E-278D-40DB-9CD5-D69F863A97CD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "7569977A-E567-4115-B00C-4B0CBA86582E"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.2.1",
"versionEndIncluding": "11.5.6",
"matchCriteriaId": "8ABCEA29-0EDF-4D41-BB61-F2C293A5A2E2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.6.0",
"versionEndIncluding": "11.6.3.1",
"matchCriteriaId": "A17594BD-C3CF-441F-82E3-FB98A0606845"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.1.0",
"versionEndIncluding": "12.1.2",
"matchCriteriaId": "4B79FDC9-83A7-4BB9-95C3-678095DA22AA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:13.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "3F2F72B2-84F2-4FA2-9B53-E98344235EB6"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.2.1",
"versionEndIncluding": "11.5.6",
"matchCriteriaId": "55366FD7-D7BA-4D36-AC5D-1B822940842F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.6.0",
"versionEndIncluding": "11.6.3.1",
"matchCriteriaId": "04581A2D-4544-4F4F-9547-39B0A8A47998"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.1.0",
"versionEndIncluding": "12.1.2",
"matchCriteriaId": "C300F433-99A8-477E-9369-2FEB5DEEE632"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:13.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "4D3374BE-6A37-48B5-83D4-D61558A8433E"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.2.1",
"versionEndIncluding": "11.5.6",
"matchCriteriaId": "8C050740-2FD3-474D-A09A-C122F031342F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.6.0",
"versionEndIncluding": "11.6.3.1",
"matchCriteriaId": "1ACE5E93-6936-41DD-8ADB-5E0DCBB61556"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.1.0",
"versionEndIncluding": "12.1.2",
"matchCriteriaId": "2DF5C9BF-AD7C-4D28-83EB-A8D78B21F548"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:13.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "CADC28EF-ED7A-411A-8BA8-3D16452C733B"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.2.1",
"versionEndIncluding": "11.5.6",
"matchCriteriaId": "2FC80682-E373-4508-A297-EA19BF62BABA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.6.0",
"versionEndIncluding": "11.6.3.1",
"matchCriteriaId": "EC942249-E5D9-4CB1-A6D4-40333C20F561"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.1.0",
"versionEndIncluding": "12.1.2",
"matchCriteriaId": "528457E0-A8CA-454B-AC01-C55630E2FA49"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:13.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "3914B25C-4E86-4C00-A199-4C9A99BA2EC4"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.2.1",
"versionEndIncluding": "11.5.6",
"matchCriteriaId": "9EBEBCB3-AF9E-4049-980D-E87B756D6D51"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.6.0",
"versionEndIncluding": "11.6.3.1",
"matchCriteriaId": "FD96B8BE-8CB7-40F6-B786-93C976FC8658"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.1.0",
"versionEndIncluding": "12.1.2",
"matchCriteriaId": "B8AE206C-8F30-4C1A-9823-BAF2052EF065"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.2.1",
"versionEndIncluding": "11.5.6",
"matchCriteriaId": "B885F0E9-8019-4053-AAAA-2C136D55FB71"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.6.0",
"versionEndIncluding": "11.6.3.1",
"matchCriteriaId": "A05B0169-F660-4515-8E13-625CE1ECEA8A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.1.0",
"versionEndIncluding": "12.1.2",
"matchCriteriaId": "91F8E790-6C3C-476D-B403-4F13CEF0BA7A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "42821916-E601-4831-B37B-3202ACF2C562"
}
]
}
]
},
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.2.1",
"versionEndIncluding": "11.5.6",
"matchCriteriaId": "D655B3FF-5173-4850-B94C-B864E2115D95"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
"versionStartIncluding": "11.6.0",
"versionEndIncluding": "11.6.3.1",
"matchCriteriaId": "10ADA02D-A399-4A9A-B2C7-95D9FC2D3DC3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
"versionStartIncluding": "12.1.0",
"versionEndIncluding": "12.1.2",
"matchCriteriaId": "B22714C9-D539-4E1E-A7FB-6CF3FD4093C4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:f5:big-ip_webaccelerator:13.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "7E703FAB-BFCD-47A1-94BD-DD63879DE883"
}
]
}
]
}
],
"references": [
{
"url": "http://www.securitytracker.com/id/1041345",
"source": "f5sirt@f5.com",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://support.f5.com/csp/article/K48224824",
"source": "f5sirt@f5.com",
"tags": [
"Vendor Advisory"
]
}
]
}