CVE-2017-6129

Published: Dec 21, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In F5 BIG-IP APM software version 13.0.0 and 12.1.2, in some circumstances, APM tunneled VPN flows can cause a VPN/PPP connflow to be prematurely freed or cause TMM to stop responding with a "flow not in use" assertion. An attacker may be able to disrupt traffic or cause the BIG-IP system to fail over to another device in the device group.

Affected (2)

Products: F5: Big Ip Access Policy Manager

1 product

Big Ip Access Policy Manager

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Access Policy Manager	Version 12.1.2
F5 Big Ip Access Policy Manager	Version 13.0.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://www.securitytracker.com/id/1040047

Source: f5sirt@f5.com

Third Party AdvisoryVDB Entry

https://support.f5.com/csp/article/K20087443

Source: f5sirt@f5.com

Issue TrackingVendor Advisory

http://www.securitytracker.com/id/1040047

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://support.f5.com/csp/article/K20087443

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

Timeline

No history available yet.