The BGP daemon (bgpd) in all IP Infusion ZebOS versions to 7.10.6 and all OcNOS versions to 1.3.3.145 allow remote attackers to cause a denial of service attack via an autonomous system (AS) path containing 8 or more autonomous system number (ASN) elements.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Big-ip_local_traffic_manager | F5 | 11.2.1 (including) | 11.6.3 (including) |
| Big-ip_local_traffic_manager | F5 | 12.1.0 (including) | 12.1.3 (including) |
| Big-ip_local_traffic_manager | F5 | 13.0.0 (including) | 13.1.1 (including) |
| Big-ip_local_traffic_manager | F5 | 14.0.0 (including) | 14.0.0 (including) |