logo_SVG-01
✕
  • Platform
    • Rewterz XDR
    • Rewterz Defense
    • Rewterz Threat Intelligence
    • Managed Security Services
    • Managed Penetration Testing
  • Services
    • Assess
      • Compromise Assessment
      • Advanced Persistent Threats Assessment
      • Penetration Testing
      • Secure Architecture Design & Review
      • Red Team Assessment
      • Purple Team Assessment
      • Social Engineering
      • Source Code Review
    • Transform
      • SOC Consultancy
      • SOC Maturity Assessment
      • SOC Model Evaluation
      • SOC Gap Analysis
      • SIEM Gap Analysis
      • SIEM Optimization
      • SOC Content Pack
    • Train
      • Simulated Cyber Attack Exercise
      • Tabletop Exercise
      • Security Awareness and Training
    • Respond
      • Incident Analysis
      • Incident Response
  • Solutions
  • Resources
    • Blogs
    • Press Releases
    • Threat Insights
      • Threat Intelligence Reports
      • Threat Advisories
      • Monthly Threat Insights
  • Why Rewterz?
    • About Us
    • Careers
    • Contact
logo_SVG-01
  • Platform
    xdrLogo
    center_new
    Read More about XDR

    Platform

    • Rewterz XDR
    • Rewterz Defense
    • Rewterz Threat Intelligence
    Rewterz Threat Advisory – CVE-2018-0732 – F5 Multiple Products OpenSSL Denial of Service Vulnerability

    Managed Security Services

    • Managed Security Monitoring
    • Remote SOC
    • Onsite SOC
    • Hybrid SOC

    Managed Penetration Testing

    Rewterz penetration testing services help organizations determine if a cyber attacker can gain access to their critical assets while giving them detailed insights of the overall business impact of a cyber attack.

  • Services

    Assess

    • Compromise Assessment
    • APT Assessment
    • Penetration Testing
    • Architecture Design & Review
    • Red Team Assessment
    • Purple Team Assessment
    • Social Engineering
    • Source Code Review

    Transform

    • SOC Consultancy
    • SOC Maturity Assessment
    • SOC Model Evaluation
    • SOC Gap Analysis
    • SIEM Gap Analysis
    • SIEM Optimization
    • SOC Content Pack

    Train

    • Simulated Cyber Attack Exercise
    • Tabletop Exercise
    • Security Awareness and Training

    Respond

    • Incident Analysis
    • Incident Response
  • Solutions
  • Resources

    Resources

    • Blog
    • Press Releases
    March 17, 2023
    March 17, 2023
    Rewterz Threat Alert – Chaos Ransomware – Active IOCs
    Severity High Analysis Summary Chaos is a customizable ransomware builder that emerged on June 9 2021 (in underground forums) by falsely marketing itself as the .NET […]
    March 17, 2023
    March 17, 2023
    Rewterz Threat Advisory – Multiple Adobe ColdFusion Vulnerabilities
    Severity High Analysis Summary CVE-2023-26361 CVSS:4.9 Adobe ColdFusion could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially […]
    March 17, 2023
    March 17, 2023
    Rewterz Threat Alert – Ursnif Banking Trojan aka Gozi – Active IOCs
    Severity Medium Analysis Summary Ursnif banking trojan also known as Gozi and Dreambot has been around for more than 10 years. It gained popularity in 2015 […]

    Threat Insights

    16
    pdf-file (1)
    Annual Threat Intelligence Report 2022
    • Threat Advisories
    • Monthly Threat Insights
    • Threat Intelligence Reports
  • Why Rewterz?

    About Us

    Before Rewterz got its start, the market was in dire need of a specialized and dedicated information security company. It was nearly impossible for businesses to find a trustworthy provider that could truly cover all of their bases. We wanted to meet this need, giving companies across the globe a chance to get ahead while knowing that their data is in good hands.

    Read More

    play_btn_Smallplay_btn_hover_Small
    leadership

    Our Leadership

    Our leadership team brings together years of knowledge and experience in cybersecurity to drive our company's mission and vision. Our team is passionate about delivering high-quality products and services, leading by example and assisting our clients in securing their organization’s environment.
    help

    CSR

    At Rewterz, we believe that businesses have a responsibility to impact positively and contribute to the well-being of our communities as well as the planet. That's why we are committed to operating in a socially responsible and sustainable way.

    Connect with Us

    • Contact
    • Careers
Get in Touch
logo_SVG-01
  • Platform
    xdrLogo
    center_new
    Read More about XDR

    Platform

    • Rewterz XDR
    • Rewterz Defense
    • Rewterz Threat Intelligence
    Rewterz Threat Advisory – CVE-2018-0732 – F5 Multiple Products OpenSSL Denial of Service Vulnerability

    Managed Security Services

    • Managed Security Monitoring
    • Remote SOC
    • Onsite SOC
    • Hybrid SOC

    Managed Penetration Testing

    Rewterz penetration testing services help organizations determine if a cyber attacker can gain access to their critical assets while giving them detailed insights of the overall business impact of a cyber attack.

  • Services

    Assess

    • Compromise Assessment
    • APT Assessment
    • Penetration Testing
    • Architecture Design & Review
    • Red Team Assessment
    • Purple Team Assessment
    • Social Engineering
    • Source Code Review

    Transform

    • SOC Consultancy
    • SOC Maturity Assessment
    • SOC Model Evaluation
    • SOC Gap Analysis
    • SIEM Gap Analysis
    • SIEM Optimization
    • SOC Content Pack

    Train

    • Simulated Cyber Attack Exercise
    • Tabletop Exercise
    • Security Awareness and Training

    Respond

    • Incident Analysis
    • Incident Response
  • Solutions
  • Resources

    Resources

    • Blog
    • Press Releases
    March 17, 2023
    March 17, 2023
    Rewterz Threat Alert – Chaos Ransomware – Active IOCs
    Severity High Analysis Summary Chaos is a customizable ransomware builder that emerged on June 9 2021 (in underground forums) by falsely marketing itself as the .NET […]
    March 17, 2023
    March 17, 2023
    Rewterz Threat Advisory – Multiple Adobe ColdFusion Vulnerabilities
    Severity High Analysis Summary CVE-2023-26361 CVSS:4.9 Adobe ColdFusion could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially […]
    March 17, 2023
    March 17, 2023
    Rewterz Threat Alert – Ursnif Banking Trojan aka Gozi – Active IOCs
    Severity Medium Analysis Summary Ursnif banking trojan also known as Gozi and Dreambot has been around for more than 10 years. It gained popularity in 2015 […]

    Threat Insights

    16
    pdf-file (1)
    Annual Threat Intelligence Report 2022
    • Threat Advisories
    • Monthly Threat Insights
    • Threat Intelligence Reports
  • Why Rewterz?

    About Us

    Before Rewterz got its start, the market was in dire need of a specialized and dedicated information security company. It was nearly impossible for businesses to find a trustworthy provider that could truly cover all of their bases. We wanted to meet this need, giving companies across the globe a chance to get ahead while knowing that their data is in good hands.

    Read More

    play_btn_Smallplay_btn_hover_Small
    leadership

    Our Leadership

    Our leadership team brings together years of knowledge and experience in cybersecurity to drive our company's mission and vision. Our team is passionate about delivering high-quality products and services, leading by example and assisting our clients in securing their organization’s environment.
    help

    CSR

    At Rewterz, we believe that businesses have a responsibility to impact positively and contribute to the well-being of our communities as well as the planet. That's why we are committed to operating in a socially responsible and sustainable way.

    Connect with Us

    • Contact
    • Careers
Get in Touch
Rewterz
Rewterz Threat Alert – JungleSec Ransomware Infects Victims Through IPMI Remote Consoles
December 28, 2018
Rewterz
Rewterz Threat Alert – Message Hoaxing emerges in Pakistan via ScareWare Messages
December 31, 2018

Rewterz Threat Advisory – CVE-2018-0732 – F5 Multiple Products OpenSSL Denial of Service Vulnerability

December 28, 2018

SEVERITY: Medium

 

 

CATEGORY: Vulnerability

 

 

ANALYSIS SUMMARY

 

 

During key agreement in a TLS handshake using a DH(E) based ciphersuite, a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack.

 

 

AFFECTED PRODUCTS

 

 

  • Traffix SDC 4.4.0
  • Traffix SDC 5.0.0 – 5.1.0
  • F5 iWorkflow 2.1.0 – 2.3.0
  • BIG-IQ Centralized Management 4.6.0
  • BIG-IQ Centralized Management 5.0.0 – 5.4.0
  • BIG-IQ Centralized Management 6.0.0
  • Enterprise Manager 3.1.1
  • BIG-IP (LTM) 11.2.1 – 11.6.3
  • BIG-IP (LTM) 12.1.0 – 12.1.3
  • BIG-IP (LTM) 13.0.0 – 13.1.1
  • BIG-IP (LTM) 14.0.0 – 14.1.0
  • BIG-IP (AAM) 11.2.1 – 11.6.3
  • BIG-IP (AAM) 12.1.0 – 12.1.3
  • BIG-IP (AAM) 13.0.0 – 13.1.1
  • BIG-IP (AAM) 14.0.0 – 14.1.0
  • BIG-IP (AFM) 11.2.1 – 11.6.3
  • BIG-IP (AFM) 12.1.0 – 12.1.3
  • BIG-IP (AFM) 13.0.0 – 13.1.1
  • BIG-IP (AFM) 14.0.0 – 14.1.0
  • BIG-IP (Analytics) 11.2.1 – 11.6.3
  • BIG-IP (Analytics) 12.1.0 – 12.1.3
  • BIG-IP (Analytics) 13.0.0 – 13.1.1
  • BIG-IP (Analytics) 14.0.0 – 14.1.0
  • BIG-IP (APM ) 11.2.1 – 11.6.3
  • BIG-IP (APM ) 12.1.0 – 12.1.3
  • BIG-IP (APM ) 13.0.0 – 13.1.1
  • BIG-IP (APM ) 14.0.0 – 14.1.0
  • BIG-IP (ASM) 11.2.1 – 11.6.3
  • BIG-IP (ASM) 12.1.0 – 12.1.3
  • BIG-IP (ASM) 13.0.0 – 13.1.1
  • BIG-IP (ASM) 14.0.0 – 14.1.0
  • BIG-IP (DNS) 11.2.1 – 11.6.3
  • BIG-IP (DNS) 12.1.0 – 12.1.3
  • BIG-IP (DNS) 13.0.0 – 13.1.1
  • BIG-IP (DNS) 14.0.0 – 14.1.0
  • BIG-IP (Edge Gateway) 11.2.1 – 11.6.3
  • BIG-IP (Edge Gateway) 12.1.0 – 12.1.3
  • BIG-IP (Edge Gateway) 13.0.0 – 13.1.1
  • BIG-IP (Edge Gateway) 14.0.0 – 14.1.0
  • BIG-IP (FPS) 11.2.1 – 11.6.3
  • BIG-IP (FPS) 12.1.0 – 12.1.3
  • BIG-IP (FPS) 13.0.0 – 13.1.1
  • BIG-IP (FPS) 14.0.0 – 14.1.0
  • BIG-IP (GTM) 11.2.1 – 11.6.3
  • BIG-IP (GTM) 12.1.0 – 12.1.3
  • BIG-IP (GTM) 13.0.0 – 13.1.1
  • BIG-IP (GTM) 14.0.0 – 14.1.0
  • BIG-IP (LinkController) 11.2.1 – 11.6.3
  • BIG-IP (LinkController) 12.1.0 – 12.1.3
  • BIG-IP (LinkController) 13.0.0 – 13.1.1
  • BIG-IP (LinkController) 14.0.0 – 14.1.0
  • BIG-IP (PEM) 11.2.1 – 11.6.3 1
  • BIG-IP (PEM) 12.1.0 – 12.1.3
  • BIG-IP (PEM) 13.0.0 – 13.1.1
  • BIG-IP (PEM) 14.0.0 – 14.1.0
  • BIG-IP (WebAccelerator) 11.2.1 – 11.6.3
  • BIG-IP (WebAccelerator) 12.1.0 – 12.1.3
  • BIG-IP (WebAccelerator) 13.0.0 – 13.1.1
  • BIG-IP (WebAccelerator) 14.0.0 – 14.1.0

 

 

REMEDIATION

 

 

Update to a fixed version that vendor has released.

For BIG-IP LTM 14.0.0 – 14.1.0, Enterprise Manager, BIG-IQ Centralized Management:

No official solution is currently available.

 

BIG-IP LTM 11.2.1 – 11.6.3, 12.1.0 – 12.1.3, 13.0.0 – 13.1.1:

Update to version 11.6.3.3, 12.1.4, or 13.1.1.2.

 

BIG-IP AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator: Update to version 11.6.3.3, 12.1.4, or 13.1.1.2

Platform

  • Rewterz XDR
  • Rewterz Defense
  • Rewterz Threat Intelligence

Managed Security Services

  • Managed Security Monitoring
  • Remote SOC
  • Onsite SOC
  • Hybrid SOC

Assess

  • Compromise Assessment
  • APT Assessment
  • Penetration Testing
  • Architecture Design & Review
  • Red Team Assessment
  • Purple Team Assessment
  • Social Engineering
  • Source Code Review

Transform

  • SOC Consultancy
  • SOC Maturity Assessment
  • SOC Model Evaluation
  • SOC Gap Analysis
  • SIEM Gap Analysis
  • SIEM Optimization
  • SOC Content Pack

Train

  • Simulated Cyber Attack Exercise
  • Tabletop Exercise
  • Security Awareness and Training

Respond

  • Incident Analysis
  • Incident Response

Threat Insights

  • Threat Advisories
  • Monthly Threat Insights
  • Threat Intelligence Reports

Resources

  • Blog
  • Press Releases

Connect With Us

  • Contact
  • Careers
COPYRIGHT © REWTERZ. ALL RIGHTS RESERVED.
Get a Demo