CVE-2018-15318

—

CVSS 3.0

7.5 high

EPSS

1%p70

Published

Oct 31, 2018 (Oct 31, 2018)

Modified

Jun 17, 2026

Description

In BIG-IP 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, or 12.1.3.4-12.1.3.6, If an MPTCP connection receives an abort signal while the initial flow is not the primary flow, the initial flow will remain after the closing procedure is complete. TMM may restart and produce a core file as a result of this condition.

Vendors: f5
Products: big-ip local traffic manager, big-ip advanced firewall manager, big-ip application acceleration manager, big-ip analytics, big-ip access policy manager, big-ip protocol security module, big-ip domain name system, big-ip edge gateway, big-ip fraud protection service, big-ip global traffic manager, big-ip link controller, big-ip policy enforcement manager
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.