CVE:CVE-2018-5510
CNNVD:CNNVD-201804-703
F5 BIG-IP Analytics是美国F5公司的一套Web应用程序性能分析软件。该软件提供了详细的分析性能指标，如每秒交易、服务器延迟、网页加载时间和响应的吞吐量等。Traffic Management Microkernel（TMM）是其中的一个执行流量管理的服务进程。
多款F5产品中的TMM存在安全漏洞。攻击者可利用该漏洞造成Traffic Management Microkernel重启。以下产品和版本受到影响：F5 BIG-IP Analytics 11.5.4 HF4版本至11.5.5版本；BIG-IP LTM 11.5.4 HF4版本至11.5.5版本；BIG-IP AAM 11.5.4 HF4版本至11.5.5版本；BIG-IP AFM 11.5.4 HF4版本至11.5.5版本；BIG-IP APM 11.5.4 HF4版本至11.5.5版本；BIG-IP ASM 11.5.4 HF4版本至11.5.5版本；BIG-IP DNS 11.5.4 HF4版本至11.5.5版本；BIG-IP Edge 11.5.4 HF4版本至11.5.5版本；BIG-IP Gateway 11.5.4 HF4版本至11.5.5版本；BIG-IP GTM Link Controller 11.5.4 HF4版本至11.5.5版本；BIG-IP PEM 11.5.4 HF4版本至11.5.5版本；BIG-IP WebAccelerator 11.5.4 HF4版本至11.5.5版本；BIG-IP WebSafe 11.5.4 HF4版本至11.5.5版本。
solution:Upgrade f5 big-ip_local_traffic_manager to a higher version than 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5,and avoid the version 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5; Upgrade f5 big-ip_application_acceleration_manager to a higher version than 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5,and avoid the version 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5; Upgrade f5 big-ip_advanced_firewall_manager to a higher version than 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5,and avoid the version 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5; Upgrade f5 big-ip_analytics to a higher version than 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5,and avoid the version 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5; Upgrade f5 big-ip_access_policy_manager to a higher version than 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5,and avoid the version 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5; Upgrade f5 big-ip_application_security_manager to a higher version than 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5,and avoid the version 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5; Upgrade f5 big-ip_edge_gateway to a higher version than 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5,and avoid the version 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5; Upgrade f5 big-ip_global_traffic_manager to a higher version than 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5,and avoid the version 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5; Upgrade f5 big-ip_link_controller to a higher version than 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5,and avoid the version 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5; Upgrade f5 big-ip_policy_enforcement_manager to a higher version than 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5,and avoid the version 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5; Upgrade f5 big-ip_webaccelerator to a higher version than 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5,and avoid the version 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5; Upgrade f5 big-ip_websafe to a higher version than 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5,and avoid the version 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5; Upgrade f5 big-ip_domain_name_system to a higher version than 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5,and avoid the version 11.5.4,11.5.4:hf1,11.5.4:hf2,11.5.4:hf3,11.5.4:hf4,11.5.5