← Back

CVE-2017-6162

nvd nist
Published: Oct 27, 2017Modified: May 13, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, 11.2.1, in some cases TMM may crash when processing TCP traffic. This vulnerability affects TMM via a virtual server configured with TCP profile. Traffic processing is disrupted while Traffic Management Microkernel (TMM) restarts. If the affected BIG-IP system is configured to be part of a device group, it will trigger a failover to the peer device.

Affected (50)

8 products
Big Ip Local Traffic Manager
Big Ip Advanced Firewall Manager
Big Ip Access Policy Manager
Big Ip Link Controller
Big Ip Policy Enforcement Manager
Big Ip Websafe
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
F5
From 11.5.0 to 11.5.4
Version 11.2.1
Version 11.6.0
Version 11.6.1
Version 12.0.0
Version 12.1.0
Version 12.1.1
Configuration B
7 vulnerable
Configuration C
7 vulnerable
Configuration D
7 vulnerable
Vulnerable SoftwareAffected Versions
F5
From 11.5.0 to 11.5.4
Version 11.2.1
Version 11.6.0
Version 11.6.1
Version 12.0.0
Version 12.1.0
Version 12.1.1
Configuration E
7 vulnerable
Configuration F
7 vulnerable
Vulnerable SoftwareAffected Versions
F5
From 11.5.0 to 11.5.4
Version 11.2.1
Version 11.6.0
Version 11.6.1
Version 12.0.0
Version 12.1.0
Version 12.1.1
Configuration G
7 vulnerable
Configuration H
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 1.0.0

References (6)

Source: f5sirt@f5.com
Third Party AdvisoryVDB Entry
Source: f5sirt@f5.com
Third Party AdvisoryVDB Entry
Source: f5sirt@f5.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.