Vulnerability Description
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, 11.2.1, in some cases TMM may crash when processing TCP traffic. This vulnerability affects TMM via a virtual server configured with TCP profile. Traffic processing is disrupted while Traffic Management Microkernel (TMM) restarts. If the affected BIG-IP system is configured to be part of a device group, it will trigger a failover to the peer device.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| F5 | Big-Ip Local Traffic Manager | >= 11.5.0, <= 11.5.4 |
| F5 | Big-Ip Application Acceleration Manager | >= 11.5.0, <= 11.5.4 |
| F5 | Big-Ip Advanced Firewall Manager | >= 11.5.0, <= 11.5.4 |
| F5 | Big-Ip Access Policy Manager | >= 11.5.0, <= 11.5.4 |
| F5 | Big-Ip Application Security Manager | >= 11.5.0, <= 11.5.4 |
| F5 | Big-Ip Link Controller | >= 11.5.0, <= 11.5.4 |
| F5 | Big-Ip Policy Enforcement Manager | >= 11.5.0, <= 11.5.4 |
| F5 | Big-Ip Websafe | 1.0.0 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/101635Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039673Third Party AdvisoryVDB Entry
- https://support.f5.com/csp/article/K13421245Vendor Advisory
- http://www.securityfocus.com/bid/101635Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1039673Third Party AdvisoryVDB Entry
- https://support.f5.com/csp/article/K13421245Vendor Advisory
FAQ
What is CVE-2017-6162?
CVE-2017-6162 is a vulnerability with a CVSS score of 5.9 (MEDIUM). In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, 11.2.1, in some cases TMM ...
How severe is CVE-2017-6162?
CVE-2017-6162 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-6162?
Check the references section above for vendor advisories and patch information. Affected products include: F5 Big-Ip Local Traffic Manager, F5 Big-Ip Application Acceleration Manager, F5 Big-Ip Advanced Firewall Manager, F5 Big-Ip Access Policy Manager, F5 Big-Ip Application Security Manager.