CVE-2018-17539
Last modified
CVE-2018-17539 is a vulnerability of currently unknown severity. The BGP daemon (bgpd) in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of service attack via an autonomous system (AS) path containing 8 or more autonomous system number (ASN) elements.. EPSS estimates a 2.24% chance of exploitation in the next 30 days.
Description
The BGP daemon (bgpd) in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of service attack via an autonomous system (AS) path containing 8 or more autonomous system number (ASN) elements.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| F5 | Big-Ip Local Traffic Manager | >= 11.2.1, <= 11.6.3 |
| F5 | Big-Ip Local Traffic Manager | >= 12.1.0, <= 12.1.3 |
| F5 | Big-Ip Local Traffic Manager | >= 13.0.0, <= 13.1.1 |
| F5 | Big-Ip Local Traffic Manager | 14.0.0 |
| Ipinfusion | Ocnos | <= 1.3.3.145 |
| Ipinfusion | Zebos | <= 7.10.6 |
References
- http://www.securityfocus.com/bid/106367Third Party Advisory, VDB Entry
- https://support.f5.com/csp/article/K17264695Vendor Advisory
- http://www.securityfocus.com/bid/106367Third Party Advisory, VDB Entry
- https://support.f5.com/csp/article/K17264695Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-17539?
How severe is CVE-2018-17539?
How do I fix CVE-2018-17539?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-17532Teltonika RUT9XX routers with firmware before 00.04.233 are …
- CVE-2018-17533Teltonika RUT9XX routers with firmware before 00.05.01.1 are…
- CVE-2018-17534Teltonika RUT9XX routers with firmware before 00.04.233 prov…
- CVE-2018-17536An issue was discovered in GitLab Community and Enterprise E…5.4
- CVE-2018-17537An issue was discovered in GitLab Community and Enterprise E…5.4
- CVE-2018-17538Axon (formerly TASER International) Evidence Sync 3.15.89 is…
- CVE-2018-17540The gmp plugin in strongSwan before 5.7.1 has a Buffer Overf…
- CVE-2018-17542SQL Injection exists in MailSherlock before 1.5.235 for OAKl…4.3
- CVE-2018-1755IBM WebSphere Application Server Liberty could allow a remot…5.9
- CVE-2018-17552SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allo…
- CVE-2018-17553An "Unrestricted Upload of File with Dangerous Type" issue w…
- CVE-2018-17555The web component on ARRIS TG2492LG-NA 061213 devices allows…7.5
Are you affected by CVE-2018-17539?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST