CVE-2018-17539

The BGP daemon (bgpd) in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of service attack via an autonomous system (AS) path containing 8 or more autonomous system number (ASN) elements.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-12-28

Last modified

2024-08-05

Affected products

• Big-ip Local Traffic Manager (F5)
• Ocnos (Ipinfusion)
• Zebos (Ipinfusion)

References

• http://www.securityfocus.com/bid/106367
• https://support.f5.com/csp/article/K17264695