CVE-2018-5530

F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.1 virtual servers with HTTP/2 profiles enabled are vulnerable to "HPACK Bomb"

published July 25, 2018

CVSS
—
EPSS
2%
Percentile
77.8
In the wild
Unconfirmed
What it is

F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.1 virtual servers with HTTP/2 profiles enabled are vulnerable to "HPACK Bomb".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01759 · 77.8th percentile
Published
2018-07-25T14:00Z
EPSS history
Timeline
  • 25 JUL 14:00Z
    F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.1 virtual servers with HTTP/2 profiles enabled are vulnerable to "HPACK Bomb"
    cvelistv5