CVE-2018-5538

On F5 BIG-IP DNS 13.1.0-13.1.0.7, 12.1.3-12.1.3.5, DNS Express / DNS Zones accept NOTIFY messages on the management interface from source IP addresses not…

published July 25, 2018

CVSS
—
EPSS
1%
Percentile
55.3
In the wild
Unconfirmed
What it is

On F5 BIG-IP DNS 13.1.0-13.1.0.7, 12.1.3-12.1.3.5, DNS Express / DNS Zones accept NOTIFY messages on the management interface from source IP addresses not listed in the 'Allow NOTIFY From' configuration parameter when the db variable "dnsexpress.notifyport" is set to any value other than the default of "0".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00782 · 55.3th percentile
Published
2018-07-25T14:00Z
EPSS history
Timeline
  • 25 JUL 14:00Z
    On F5 BIG-IP DNS 13.1.0-13.1.0.7, 12.1.3-12.1.3.5, DNS Express / DNS Zones accept NOTIFY messages on the management interface from source IP addresses not…
    cvelistv5