CVE-2017-6155
7.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or HTTP/2 requests may result in a disruption of service to TMM. Data plane is only exposed when a SPDY or HTTP/2 profile is attached to a virtual server. There is no control plane exposure.
Affected (55)
Products: F5: Big Ip Local Traffic Manager, Big Ip Application Acceleration Manager, Big Ip Advanced Firewall Manager, Big Ip Access Policy Manager, Big Ip Application Security Manager, Big Ip Edge Gateway, Big Ip Link Controller, Big Ip Policy Enforcement Manager, Big Ip Webaccelerator, Big Ip Websafe, Big Ip Protocol Security Module
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.1 to 11.5.5 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.1 to 11.5.5 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.1 to 11.5.5 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.1 to 11.5.5 |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.1 to 11.5.5 |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.1 to 11.5.5 |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.1 to 11.5.5 |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.1 to 11.5.5 |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.1 to 11.5.5 |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.1 to 11.5.5 |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.1 to 11.5.5 |
References (2)
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.