CVE-2018-5530

Published: Jul 25, 2018
Updated: Apr 13, 2023
CVE: <a href="https://nvd.nist.gov/vuln/detail/CVE-2018-5530" target="_blank" rel="noopener"> CVE-2018-5530
Severity: High
Exploit:

F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.1 virtual servers with HTTP/2 profiles enabled are vulnerable to "HPACK Bomb".

CVSS v3:

CVSS v2:

CWEs:

Software	From	Fixed in
f5 / big-ip_local_traffic_manager	11.6.0	11.6.3.1.x
f5 / big-ip_local_traffic_manager	13.0.0	13.1.0.5.x
f5 / big-ip_local_traffic_manager	12.1.0	12.1.3.5.x
f5 / big-ip_application_acceleration_manager	11.6.0	11.6.3.1.x
f5 / big-ip_application_acceleration_manager	13.0.0	13.1.0.5.x
f5 / big-ip_application_acceleration_manager	12.1.0	12.1.3.5.x
f5 / big-ip_advanced_firewall_manager	11.6.0	11.6.3.1.x
f5 / big-ip_advanced_firewall_manager	13.0.0	13.1.0.5.x
f5 / big-ip_advanced_firewall_manager	12.1.0	12.1.3.5.x
f5 / big-ip_analytics	11.6.0	11.6.3.1.x
f5 / big-ip_analytics	13.0.0	13.1.0.5.x
f5 / big-ip_analytics	12.1.0	12.1.3.5.x
f5 / big-ip_access_policy_manager	11.6.0	11.6.3.1.x
f5 / big-ip_access_policy_manager	13.0.0	13.1.0.5.x
f5 / big-ip_access_policy_manager	12.1.0	12.1.3.5.x
f5 / big-ip_application_security_manager	11.6.0	11.6.3.1.x
f5 / big-ip_application_security_manager	13.0.0	13.1.0.5.x
f5 / big-ip_application_security_manager	12.1.0	12.1.3.5.x
f5 / big-ip_edge_gateway	11.6.0	11.6.3.1.x
f5 / big-ip_edge_gateway	13.0.0	13.1.0.5.x
f5 / big-ip_edge_gateway	12.1.0	12.1.3.5.x
f5 / big-ip_policy_enforcement_manager	11.6.0	11.6.3.1.x
f5 / big-ip_policy_enforcement_manager	13.0.0	13.1.0.5.x
f5 / big-ip_policy_enforcement_manager	12.1.0	12.1.3.5.x
f5 / big-ip_websafe	13.0.0	13.1.0.5.x
f5 / big-ip_websafe	12.1.0	12.1.3.5.x
f5 / big-ip_websafe	11.6.0	11.6.3.1.x