Forum Discussion

Altostratus

Jul 10, 2015

CVE-2015-1793

Hi, Does anyone know if F5 devices are affected by this OpenSSL vulnerability, CVE-2015-1793? Thanks!

Nimbostratus

Jul 10, 2015

Hi Nolipineda, there is a SOL available for CVE-2015-1793 but currently it´s not showing any more details i.e. Version or Vulnerable component.

F5 is still researching, so it´s up to us of waiting for any SOL Updates.

Would be also interesting to know whether the use of “native” Cipher will mitigate that vulnerability as they have been implemented into hardware.

Additional to CVE-2015-1793 another SOL for CVE-2015-1788 which might be worth to have a look in: https://support.f5.com/kb/en-us/solutions/public/16000/900/sol16938.html?ref=rss

cheers, Steigman