← All advisories

High severity7.5NVD Advisory· Published Jul 25, 2018· Updated Jun 17, 2026

CVE-2018-5530

CVE-2018-5530

Description

F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.1 virtual servers with HTTP/2 profiles enabled are vulnerable to "HPACK Bomb".

Affected products

2

F5, Inc./Big IPllm-fuzzy
Range: 11.6.0-11.6.3.5, 12.1.0-12.1.3.5, 13.0.0-13.1.0.5
F5, Inc./Big Ip (ltm, Aam, Afm, Apm, Asm, Link Controller, Pem, Webaccelerator, Websafe)cpe-rescue
Range: 13.0.0-13.1.0.5

Patches

Vulnerability mechanics

References

2

www.securityfocus.com/bid/104908nvdThird Party AdvisoryVDB Entry
support.f5.com/csp/article/K45611803nvdVendor Advisory

News mentions

0

No linked articles in our index yet.