CVE-2002-20001

The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.

• balasys dheater • siemens scalance w1750d firmware • suse linux enterprise server 11 • suse linux enterprise server 12 • suse linux enterprise server 15 • f5 big-ip access policy manager (>= 13.1.0 < 16.1.4) • f5 big-ip access policy manager (>= 17.0.0 < 17.1.0) • f5 big-ip advanced firewall manager (>= 13.1.0 <= 17.1.2) • f5 big-ip advanced firewall manager 17.5.0 • f5 big-ip advanced web application firewall (>= 13.1.0 <= 17.1.2) • f5 big-ip advanced web application firewall 17.5.0 • f5 big-ip analytics (>= 13.1.0 <= 17.1.2) • f5 big-ip analytics 17.5.0 • f5 big-ip application acceleration manager (>= 13.1.0 <= 17.1.2) • f5 big-ip application acceleration manager 17.5.0 • f5 big-ip application security manager (>= 13.1.0 <= 17.1.2) • f5 big-ip application security manager 17.5.0 • f5 big-ip application visibility and reporting (>= 13.1.0 <= 17.1.2) • f5 big-ip application visibility and reporting 17.5.0 • f5 big-ip carrier-grade nat (>= 13.1.0 <= 17.1.2) • f5 big-ip carrier-grade nat 17.5.0 • f5 big-ip ddos hybrid defender (>= 13.1.0 <= 17.1.2) • f5 big-ip ddos hybrid defender 17.5.0 • f5 big-ip domain name system (>= 13.1.0 <= 17.1.2) • f5 big-ip domain name system 17.5.0 • f5 big-ip edge gateway (>= 13.1.0 <= 17.1.2) • f5 big-ip edge gateway 17.5.0 • f5 big-ip fraud protection service (>= 13.1.0 <= 17.1.2) • f5 big-ip fraud protection service 17.5.0 • f5 big-ip global traffic manager (>= 13.1.0 <= 17.1.2) • f5 big-ip global traffic manager 17.5.0 • f5 big-ip link controller (>= 13.1.0 <= 17.1.2) • f5 big-ip link controller 17.5.0 • f5 big-ip local traffic manager (>= 13.1.0 <= 17.1.2) • f5 big-ip local traffic manager 17.5.0 • f5 big-ip policy enforcement manager (>= 13.1.0 <= 17.1.2) • f5 big-ip policy enforcement manager 17.5.0 • f5 big-ip service proxy 1.6.0 • f5 big-ip ssl orchestrator (>= 13.1.0 <= 17.1.2) • f5 big-ip ssl orchestrator 17.5.0 • f5 big-ip webaccelerator (>= 13.1.0 <= 17.1.2) • f5 big-ip webaccelerator 17.5.0 • f5 big-ip websafe (>= 13.1.0 <= 17.1.2) • f5 big-ip websafe 17.5.0 • f5 big-iq centralized management (>= 8.0.0 <= 8.4.0) • f5 big-iq centralized management 7.1.0 • f5 traffix signaling delivery controller 5.1.0 • f5 traffix signaling delivery controller 5.2.0 • f5 f5os-a (>= 1.3.0 <= 1.3.2) • f5 f5os-a (>= 1.5.0 <= 1.5.3) • f5 f5os-a 1.8.0 • f5 f5os-c (>= 1.3.0 <= 1.3.2) • f5 f5os-c (>= 1.6.0 <= 1.6.2) • f5 f5os-c 1.5.0 • f5 f5os-c 1.5.1 • f5 f5os-c 1.8.0 • f5 f5os-c 1.8.1 • hpe arubaos-cx (>= 10.06.0000 < 10.06.0180) • hpe arubaos-cx (>= 10.07.0000 < 10.07.0030) • hpe arubaos-cx (>= 10.08.0000 < 10.08.0010) … and 4 more