CVE-2018-5505

Severity: medium (CVSS 5.9 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-03-22 · updated 2026-06-17

Description

On F5 BIG-IP versions 13.1.0 - 13.1.0.3, when ASM and AVR are both provisioned, TMM may restart while processing DNS requests when the virtual server is configured with a DNS profile and the Protocol setting is set to TCP.

Affected products

F5 Big-Ip Analytics: from 13.1.0 before 13.1.0.4 — fixed in 13.1.0.4
BIG-IP ASM: from 13.1.0 before 13.1.0.4 — fixed in 13.1.0.4

How to fix

Upgrade to a fixed version: F5 Big-Ip Analytics 13.1.0.4; BIG-IP ASM 13.1.0.4. Check the vendor advisory for mitigations.

References

http://www.securityfocus.com/bid/103505
http://www.securitytracker.com/id/1040559
https://support.f5.com/csp/article/K23520761
http://www.securityfocus.com/bid/103505
http://www.securitytracker.com/id/1040559
https://support.f5.com/csp/article/K23520761

Get alerted when CVE-2018-5505 or the next vulnerability affects your stack