CVE-2018-5532

On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be resolved by the cache even after the parent server revokes the record, if the DNS Cache is receiving a stream of requests for the cached name.

Score

CVSS 3.0 5.3 Medium

Status

Modified - f5sirt@f5.com

Published

2018-07-19

Last modified

2024-09-17

Affected products

• Big-ip Access Policy Manager (F5)
• Big-ip Advanced Firewall Manager (F5)
• Big-ip Analytics (F5)
• Big-ip Application Acceleration Manager (F5)
• Big-ip Application Security Manager (F5)
• Big-ip Domain Name System (F5)
• Big-ip Edge Gateway (F5)
• Big-ip Fraud Protection Service (F5)
• Big-ip Global Traffic Manager (F5)
• Big-ip Link Controller (F5)
• Big-ip Local Traffic Manager (F5)
• Big-ip Policy Enforcement Manager (F5)
• Big-ip Webaccelerator (F5)
• Aam (F5 Networks Inc.)
• Afm (F5 Networks Inc.)
• Analytics (F5 Networks Inc.)
• Apm (F5 Networks Inc.)
• Asm (F5 Networks Inc.)
• Big-ip Ltm (F5 Networks Inc.)
• Dns (F5 Networks Inc.)
• Edge Gateway (F5 Networks Inc.)
• Fps (F5 Networks Inc.)
• Gtm (F5 Networks Inc.)
• Link Controller (F5 Networks Inc.)
• Pem (F5 Networks Inc.)
• Webaccelerator (F5 Networks Inc.)

References

• http://www.securitytracker.com/id/1041345
• https://support.f5.com/csp/article/K48224824