For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Parveez_70209's avatar
Parveez_70209
Icon for Nimbostratus rankNimbostratus
Feb 16, 2015

chargen could be used in UDP bomb

Hi Team,

 

We are getting this vulnerability named: "chargen could be used in UDP bomb" against our Web-environments hosted into 10.2.4 LTM's.

 

Kindly suggest a fix.

 

Thanks and Regards Parveez

 

1 Reply

  • uni's avatar
    uni
    Icon for Altocumulus rankAltocumulus
    Feb 16, 2015

    Do you have something listening on UDP port 19? The chargen service listens on this port. It can be used to flood your network because small input generates a lot of output. To fix, block port 19 in your firewall, disable the virtual which listens on it, or shutdown the chargen service on your servers.