1. Home
  2. CVE Database
  3. CVE-2016-9252
HIGH · 7.5

CVE-2016-9252

The Traffic Management Microkernel (TMM) in F5 BIG-IP before 11.5.4 HF3, 11.6.x before 11.6.1 HF2 and 12.x before 12.1.2 does not properly handle minimum path MTU options for IPv6, which allows remote...

Vulnerability Description

The Traffic Management Microkernel (TMM) in F5 BIG-IP before 11.5.4 HF3, 11.6.x before 11.6.1 HF2 and 12.x before 12.1.2 does not properly handle minimum path MTU options for IPv6, which allows remote attackers to cause a denial-of-service (DoS) through unspecified vectors.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
F5Big-Ip Local Traffic Manager10.2.1
F5Big-Ip Application Acceleration Manager11.4.0
F5Big-Ip Advanced Firewall Manager11.4.0
F5Big-Ip Analytics11.2.1
F5Big-Ip Access Policy Manager10.2.1
F5Big-Ip Application Security Manager10.2.1
F5Big-Ip Domain Name System12.0.0
F5Big-Ip Link Controller10.2.1
F5Big-Ip Policy Enforcement Manager11.4.0
F5Big-Ip Websafe11.6.0
F5Big-Ip Edge Gateway10.2.1
F5Big-Ip Global Traffic Manager10.2.1
F5Big-Ip Protocol Security Module10.2.1
F5Big-Ip Webaccelerator10.2.1

Related Weaknesses (CWE)

CWE-19

References

FAQ

What is CVE-2016-9252?

CVE-2016-9252 is a vulnerability with a CVSS score of 7.5 (HIGH). The Traffic Management Microkernel (TMM) in F5 BIG-IP before 11.5.4 HF3, 11.6.x before 11.6.1 HF2 and 12.x before 12.1.2 does not properly handle minimum path MTU options for IPv6, which allows remote...

How severe is CVE-2016-9252?

CVE-2016-9252 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-9252?

Check the references section above for vendor advisories and patch information. Affected products include: F5 Big-Ip Local Traffic Manager, F5 Big-Ip Application Acceleration Manager, F5 Big-Ip Advanced Firewall Manager, F5 Big-Ip Analytics, F5 Big-Ip Access Policy Manager.