CVE-2018-5538
Last modified
CVE-2018-5538 is a vulnerability of currently unknown severity. On F5 BIG-IP DNS 13.1.0-13.1.0.7, 12.1.3-12.1.3.5, DNS Express / DNS Zones accept NOTIFY messages on the management interface from source IP addresses not listed in the 'Allow NOTIFY From' configuration parameter when the db variable "dnsexpress.notifyport" is set to any value other than the default of "0".. EPSS estimates a 0.78% chance of exploitation in the next 30 days.
Description
On F5 BIG-IP DNS 13.1.0-13.1.0.7, 12.1.3-12.1.3.5, DNS Express / DNS Zones accept NOTIFY messages on the management interface from source IP addresses not listed in the 'Allow NOTIFY From' configuration parameter when the db variable "dnsexpress.notifyport" is set to any value other than the default of "0".
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| F5 | Big-Ip Domain Name System | >= 12.1.3, <= 12.1.3.5 |
| F5 | Big-Ip Domain Name System | > 13.1.0, <= 13.1.0.7 |
| F5 | Big-Ip Global Traffic Manager | >= 12.1.3, <= 12.1.3.5 |
| F5 | Big-Ip Global Traffic Manager | >= 13.1.0, <= 13.1.0.7 |
| F5 | Big-Ip Local Traffic Manager | >= 12.1.3, <= 12.1.3.5 |
| F5 | Big-Ip Local Traffic Manager | >= 13.1.0, <= 13.1.0.7 |
| F5 | Big-Ip Link Controller | >= 12.1.3, <= 12.1.3.5 |
| F5 | Big-Ip Link Controller | >= 13.1.0, <= 13.1.0.7 |
References
- https://support.f5.com/csp/article/K45435121Mitigation, Vendor Advisory
- https://support.f5.com/csp/article/K45435121Mitigation, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-5538?
How severe is CVE-2018-5538?
How do I fix CVE-2018-5538?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-5532On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2…
- CVE-2018-5533Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2,…
- CVE-2018-5534Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.…
- CVE-2018-5535On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1…
- CVE-2018-5536A remote attacker via undisclosed measures, may be able to e…
- CVE-2018-5537A remote attacker may be able to disrupt services on F5 BIG-…
- CVE-2018-5539Under certain conditions, on F5 BIG-IP ASM 13.0.0-13.1.0.7, …
- CVE-2018-5540On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1…
- CVE-2018-5541When F5 BIG-IP ASM 13.0.0-13.1.0.1, 12.1.0-12.1.3.5, 11.6.0-…
- CVE-2018-5542F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.6, or 11.2.1-11.6.3.2…
- CVE-2018-5543The F5 BIG-IP Controller for Kubernetes 1.0.0-1.5.0 (k8s-big…
- CVE-2018-5544When the F5 BIG-IP APM 13.0.0-13.1.1 or 12.1.0-12.1.3 render…
Are you affected by CVE-2018-5538?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST