CVE-2018-15317 is a denial-of-service vulnerability affecting F5 BIG-IP versions 11.2.1 through 14.0.0.2. An unauthenticated attacker can send specially crafted SSL records to an SSL Virtual Server, corrupting SSL data structures and causing intermittent decrypt BAD_RECORD_MAC errors. This high-severity vulnerability (CVSS 7.5) can render applications inaccessible until the tmm process is restarted, impacting availability. There is no known active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 11.2.1, <= 11.5.6CPE matchmatch criteria | cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* | ||
>= 11.6.0, <= 11.6.3.2CPE matchmatch criteria | cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* | ||
>= 12.1.0, <= 12.1.3.5CPE matchmatch criteria | cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* | ||
>= 13.0.0, <= 13.1.0.7CPE matchmatch criteria | cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* | ||
>= 14.0.0, <= 14.0.0.2CPE matchmatch criteria | cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.