CVE-2017-6166

Published: Nov 22, 2017Modified: May 13, 2026

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel (TMM) may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4 profile. Traffic processing is disrupted while TMM restarts. If the affected BIG-IP system is configured as part of a device group, it will trigger a failover to the peer device.

Affected (11)

Products: F5: Big Ip Afm, Big Ip Analytics, Big Ip Apm, Big Ip Application Acceleration Manager, Big Ip Asm, Big Ip Dns, Big Ip Link Controller, Big Ip Ltm, Big Ip Pem, F5 Websafe, Linerate

11 products

Big Ip Afm

Big Ip Analytics

Big Ip Apm

Big Ip Application Acceleration Manager

Big Ip Asm

Big Ip Dns

Big Ip Link Controller

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Afm	From 12.0.0 to 12.1.1
F5 Big Ip Analytics	From 12.0.0 to 12.1.1
F5 Big Ip Apm	From 12.0.0 to 12.1.1
F5 Big Ip Application Acceleration Manager	From 12.0.0 to 12.1.1
F5 Big Ip Asm	From 12.0.0 to 12.1.1
F5 Big Ip Dns	From 12.0.0 to 12.1.1
F5 Big Ip Link Controller	From 12.0.0 to 12.1.1
F5 Big Ip Ltm	From 12.0.0 to 12.1.1
F5 Big Ip Pem	From 12.0.0 to 12.1.1
F5 F5 Websafe	From 12.0.0 to 12.1.1
F5 Linerate	From 2.5.0 to 2.6.2