| Title | 複数の F5 BIG-IP 製品の Datastor kernel モジュールにおけるサービス運用妨害 (DoS) の脆弱性 |
|---|---|
| Summary | 複数の F5 BIG-IP 製品の Datastor kernel モジュールには、サービス運用妨害 (DoS) 状態にされる、または権限を取得される脆弱性が存在します。 |
| Possible impacts | リモート認証されたユーザにより、コードをアップロードおよび実行するパーミッションを利用されることで、サービス運用妨害 (DoS) 状態にされる、または権限を取得される可能性があります。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | Oct. 27, 2015, midnight |
| Registration Date | Nov. 10, 2015, 11:48 a.m. |
| Last Update | Nov. 10, 2015, 11:48 a.m. |
| CVSS2.0 : 危険 | |
| Score | 9 |
|---|---|
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
| F5 Networks |
| BIG-IP Access Policy Manager (APM) 11.0.0 から 11.6.0 |
| BIG-IP Advanced Firewall Manager (AFM) 11.3.0 から 11.6.0 |
| BIG-IP Analytics 11.0.0 から 11.6.0 |
| BIG-IP Application Acceleration Manager (AAM) 11.4.0 から 11.6.0 |
| BIG-IP Application Security Manager (ASM) 11.0.0 から 11.6.0 |
| BIG-IP Edge Gateway 11.1.0 から 11.3.0 |
| BIG-IP Global Traffic Manager (GTM) 11.0.0 から 11.6.0 |
| BIG-IP Link Controller 11.0.0 から 11.6.0 |
| BIG-IP Local Traffic Manager (LTM) 11.0.0 から 11.6.0 |
| BIG-IP Policy Enforcement Manager (PEM) 11.3.0 から 11.6.0 |
| BIG-IP Protocol Security Module (PSM) 11.1.0 から 11.4.1 |
| BIG-IP WAN Optimization Manager (WOM) 11.1.0 から 11.3.0 |
| BIG-IP WebAccelerator 11.1.0 から 11.3.0 |
| BIG-IQ Application Delivery Controller (ADC) 4.5.0 |
| BIG-IQ Cloud 4.0.0 から 4.5.0 |
| BIG-IQ Device 4.2.0 から 4.5.0 |
| BIG-IQ Security 4.0.0 から 4.5.0 |
| Enterprise Manager 3.0.0 から 3.1.1 |
| No | Changed Details | Date of change |
|---|---|---|
| 0 | [2015年11月10日] 掲載 |
Feb. 17, 2018, 10:37 a.m. |
| Summary | The datastor kernel module in F5 BIG-IP Analytics, APM, ASM, Link Controller, and LTM 11.1.0 before 12.0.0, BIG-IP AAM 11.4.0 before 12.0.0, BIG-IP AFM, PEM 11.3.0 before 12.0.0, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.1.0 through 11.3.0, BIG-IP GTM 11.1.0 through 11.6.0, BIG-IP PSM 11.1.0 through 11.4.1, BIG-IQ Cloud and Security 4.0.0 through 4.5.0, BIG-IQ Device 4.2.0 through 4.5.0, BIG-IQ ADC 4.5.0, and Enterprise Manager 3.0.0 through 3.1.1 allows remote authenticated users to cause a denial of service or gain privileges by leveraging permission to upload and execute code. |
|---|---|
| Publication Date | Nov. 7, 2015, 3:59 a.m. |
| Registration Date | Jan. 26, 2021, 2:56 p.m. |
| Last Update | Nov. 21, 2024, 11:36 a.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:a:f5:big-iq_device:4.2.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-iq_device:4.5.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-iq_device:4.4.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-iq_device:4.3.0:*:*:*:*:*:*:* | |||||
| Configuration2 | or higher | or less | more than | less than | |
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.3.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:* | |||||
| Configuration3 | or higher | or less | more than | less than | |
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.3.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.2.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.2.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.1.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.3:*:*:*:*:*:*:* | |||||
| Configuration4 | or higher | or less | more than | less than | |
| cpe:2.3:a:f5:big-ip_analytics:11.4.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_analytics:11.6.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_analytics:11.2.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_analytics:11.2.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_analytics:11.3.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_analytics:11.5.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_analytics:11.5.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_analytics:11.4.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_analytics:11.5.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_analytics:11.1.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_analytics:11.5.0:*:*:*:*:*:*:* | |||||
| Configuration5 | or higher | or less | more than | less than | |
| cpe:2.3:a:f5:big-ip_link_controller:11.1.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_link_controller:11.4.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_link_controller:11.5.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_link_controller:11.5.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_link_controller:11.4.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_link_controller:11.2.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_link_controller:11.5.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_link_controller:11.2.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_link_controller:11.3.0:*:*:*:*:*:*:* | |||||
| Configuration6 | or higher | or less | more than | less than | |
| cpe:2.3:a:f5:big-ip_webaccelerator:11.2.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_webaccelerator:11.3.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_webaccelerator:11.1.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_webaccelerator:11.2.1:*:*:*:*:*:*:* | |||||
| Configuration7 | or higher | or less | more than | less than | |
| cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_application_security_manager:11.1.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_application_security_manager:11.4.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_application_security_manager:11.4.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_application_security_manager:11.3.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_application_security_manager:11.5.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_application_security_manager:11.2.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_application_security_manager:11.2.1:*:*:*:*:*:*:* | |||||
| Configuration8 | or higher | or less | more than | less than | |
| cpe:2.3:a:f5:big-iq_security:4.3.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-iq_security:4.4.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-iq_security:4.1.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-iq_security:4.2.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-iq_security:4.0.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-iq_security:4.5.0:*:*:*:*:*:*:* | |||||
| Configuration9 | or higher | or less | more than | less than | |
| cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.1.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.2.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.3.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.2.0:*:*:*:*:*:*:* | |||||
| Configuration10 | or higher | or less | more than | less than | |
| cpe:2.3:a:f5:big-ip_edge_gateway:11.2.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_edge_gateway:11.3.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_edge_gateway:11.2.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_edge_gateway:11.1.0:*:*:*:*:*:*:* | |||||
| Configuration11 | or higher | or less | more than | less than | |
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.1.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.3.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.1:*:*:*:*:*:*:* | |||||
| Configuration12 | or higher | or less | more than | less than | |
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.3.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.0:*:*:*:*:*:*:* | |||||
| Configuration13 | or higher | or less | more than | less than | |
| cpe:2.3:a:f5:big-ip_enterprise_manager:3.0.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_enterprise_manager:3.1.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_enterprise_manager:3.1.0:*:*:*:*:*:*:* | |||||
| Configuration14 | or higher | or less | more than | less than | |
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.0:*:*:*:*:*:*:* | |||||
| Configuration15 | or higher | or less | more than | less than | |
| cpe:2.3:a:f5:big-ip_protocol_security_module:11.2.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_protocol_security_module:11.2.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_protocol_security_module:11.3.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_protocol_security_module:11.1.0:*:*:*:*:*:*:* | |||||
| Configuration16 | or higher | or less | more than | less than | |
| cpe:2.3:a:f5:big-iq_cloud:4.2.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-iq_cloud:4.3.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-iq_cloud:4.4.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-iq_cloud:4.1.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-iq_cloud:4.5.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-iq_cloud:4.0.0:*:*:*:*:*:*:* | |||||
| Configuration17 | or higher | or less | more than | less than | |
| cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_local_traffic_manager:11.3.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_local_traffic_manager:11.1.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.0:*:*:*:*:*:*:* | |||||
| Configuration18 | or higher | or less | more than | less than | |
| cpe:2.3:a:f5:big-iq_adc:4.5.0:*:*:*:*:*:*:* | |||||