What’s Vulnerable › Vulnerabilities
CVE-2018-5532
- Severity: medium (CVSS 5.3 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2018-07-19 · updated 2026-06-17
Description
On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be resolved by the cache even after the parent server revokes the record, if the DNS Cache is receiving a stream of requests for the cached name.
Affected products
- F5 BIG-IP APM: from 11.2.1 through 11.5.6; from 11.6.0 through 11.6.3.1; from 12.1.0 through 12.1.2; 13.0.0
- BIG-IP: from 11.2.1 through 11.5.6; from 11.6.0 through 11.6.3.1; from 12.1.0 through 12.1.2; 13.0.0
- F5 Big-Ip Analytics: from 11.2.1 through 11.5.6; from 11.6.0 through 11.6.3.1; from 12.1.0 through 12.1.2; 13.0.0
- F5 Networks, Inc. BIG-IP (AAM): from 11.2.1 through 11.5.6; from 11.6.0 through 11.6.3.1; from 12.1.0 through 12.1.2; 13.0.0
- BIG-IP ASM: from 10.1.0 through 11.5.6; from 11.6.0 through 11.6.3.1; from 12.1.0 through 12.1.2; 13.0.0
- F5 BIG-IP DNS: from 11.2.1 through 11.5.6; from 11.6.0 through 11.6.3.1; from 12.1.0 through 12.1.2; 13.0.0
- F5 Big-Ip Edge Gateway: from 11.2.1 through 11.5.6; from 11.6.0 through 11.6.3.1; from 12.1.0 through 12.1.2; 13.0.0
- F5 Big-Ip Fraud Protection Service: from 11.2.1 through 11.5.6; from 11.6.0 through 11.6.3.1; from 12.1.0 through 12.1.2; 13.0.0
- F5 Big-Ip Global Traffic Manager: from 11.2.1 through 11.5.6; from 11.6.0 through 11.6.3.1; from 12.1.0 through 12.1.2; 13.0.0
- F5 Big-Ip Link Controller: from 11.2.1 through 11.5.6; from 11.6.0 through 11.6.3.1; from 12.1.0 through 12.1.2; 13.0.0
- F5 BIG-IP (LTM): from 11.2.1 through 11.5.6; from 11.6.0 through 11.6.3.1; from 12.1.0 through 12.1.2; 13.0.0
- F5 Networks, Inc. BIG-IP (PEM): from 11.2.1 through 11.5.6; from 11.6.0 through 11.6.3.1; from 12.1.0 through 12.1.2; 13.0.0
- F5 Big-Ip Webaccelerator: from 11.2.1 through 11.5.6; from 11.6.0 through 11.6.3.1; from 12.1.0 through 12.1.2; 13.0.0
References
- http://www.securitytracker.com/id/1041345
- https://support.f5.com/csp/article/K48224824
- http://www.securitytracker.com/id/1041345
- https://support.f5.com/csp/article/K48224824
Get alerted when CVE-2018-5532 or the next vulnerability affects your stack