What is CVE-2018-15318?

CVE-2018-15318 is a high-severity vulnerability in F5 Big-Ip Access Policy Manager, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2018-10-31.

How severe is CVE-2018-15318?

High severity. CVSS v3 base score is 7.5 out of 10.

Improper input validation in F5 Big-Ip Access Policy Manager

CVE-2018-15318

In BIG-IP 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, or 12.1.3.4-12.1.3.6, If an MPTCP connection receives an abort signal while the initial flow is not the primary flow, the initial flow will remain after the closing procedure is complete. TMM may restart and produce a core file as a result of this condition.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.013 (69.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

f5sirt@f5.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2018-15318?: CVE-2018-15318 is a high-severity vulnerability in F5 Big-Ip Access Policy Manager, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2018-10-31.
How severe is CVE-2018-15318?: High severity. CVSS v3 base score is 7.5 out of 10.