CVE-2018-5505: F5 BIG-IP Analytics

Medium severity, CVSS 5.9. EPSS: 2% chance of exploitation in the next 30 days.

On F5 BIG-IP versions 13.1.0 - 13.1.0.3, when ASM and AVR are both provisioned, TMM may restart while processing DNS requests when the virtual server is configured with a DNS profile and the Protocol setting is set to TCP.

Affected products

• F5 BIG-IP Analytics: from 13.1.0, before 13.1.0.4 (fixed in 13.1.0.4)
• F5 BIG-IP Application Security Manager: from 13.1.0, before 13.1.0.4 (fixed in 13.1.0.4)

Published 2018-03-22. Last modified 2026-06-17.