CVE-2018-5513: F5 BIG-IP Access Policy Manager

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.3, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, a malformed TLS handshake causes TMM to crash leading to a disruption of service. This issue is only exposed on the data plane when Proxy SSL configuration is enabled. The control plane is not impacted by this issue.

Affected products

F5 BIG-IP Access Policy Manager: from 11.2.1, up to and including 11.5.5; from 11.6.1, up to and including 11.6.3; from 12.1.0, up to and including 12.1.3; from 13.1.0, up to and including 13.1.0.4; version 13.0.0 only
F5 BIG-IP Advanced Firewall Manager: from 11.2.1, up to and including 11.5.5; from 11.6.1, up to and including 11.6.3; from 12.1.0, up to and including 12.1.3; from 13.1.0, up to and including 13.1.0.4; version 13.0.0 only
F5 BIG-IP Analytics: from 11.2.1, up to and including 11.5.5; from 11.6.1, up to and including 11.6.3; from 12.1.0, up to and including 12.1.3; from 13.1.0, up to and including 13.1.0.4; version 13.0.0 only
F5 BIG-IP Application Acceleration Manager: from 11.2.1, up to and including 11.5.5; from 11.6.1, up to and including 11.6.3; from 12.1.0, up to and including 12.1.3; from 13.1.0, up to and including 13.1.0.4; version 13.0.0 only
F5 BIG-IP Application Security Manager: from 11.2.1, up to and including 11.5.5; from 11.6.1, up to and including 11.6.3; from 12.1.0, up to and including 12.1.3; from 13.1.0, up to and including 13.1.0.4; version 13.0.0 only
F5 BIG-IP Domain Name System: from 11.2.1, up to and including 11.5.5; from 11.6.1, up to and including 11.6.3; from 12.1.0, up to and including 12.1.3; from 13.1.0, up to and including 13.1.0.4; version 13.0.0 only
F5 BIG-IP Edge Gateway: from 11.2.1, up to and including 11.5.5; from 11.6.1, up to and including 11.6.3; from 12.1.0, up to and including 12.1.3; from 13.1.0, up to and including 13.1.0.4; version 13.0.0 only
F5 BIG-IP Global Traffic Manager: from 11.2.1, up to and including 11.5.5; from 11.6.1, up to and including 11.6.3; from 12.1.0, up to and including 12.1.3; from 13.1.0, up to and including 13.1.0.4; version 13.0.0 only
F5 BIG-IP Link Controller: from 11.2.1, up to and including 11.5.5; from 11.6.1, up to and including 11.6.3; from 12.1.0, up to and including 12.1.3; from 13.1.0, up to and including 13.1.0.4; version 13.0.0 only
F5 BIG-IP Local Traffic Manager: from 11.2.1, up to and including 11.5.5; from 11.6.1, up to and including 11.6.3; from 12.1.0, up to and including 12.1.3; from 13.1.0, up to and including 13.1.0.4; version 13.0.0 only
F5 BIG-IP Policy Enforcement Manager: from 11.2.1, up to and including 11.5.5; from 11.6.1, up to and including 11.6.3; from 12.1.0, up to and including 12.1.3; from 13.1.0, up to and including 13.1.0.4; version 13.0.0 only
F5 BIG-IP Webaccelerator: from 11.2.1, up to and including 11.5.5; from 11.6.1, up to and including 11.6.3; from 12.1.0, up to and including 12.1.3; from 13.1.0, up to and including 13.1.0.4; version 13.0.0 only
F5 BIG-IP Websafe: from 11.2.1, up to and including 11.5.5; from 11.6.1, up to and including 11.6.3; from 12.1.0, up to and including 12.1.3; from 13.1.0, up to and including 13.1.0.4; version 13.0.0 only

Published 2018-06-01. Last modified 2026-06-17.