CVE-2017-6136

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.0.0 - 12.1.2, undisclosed traffic patterns sent to BIG-IP virtual servers, with the TCP Fast Open and Tail Loss Probe options enabled in the associated TCP profile, may cause a disruption of service to the Traffic Management Microkernel (TMM).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
f5CNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 67%
VendorProductVersion
f5big-ip_local_traffic_manager
12.1.0 ≤
𝑥
≤ 12.1.2
f5big-ip_local_traffic_manager
13.0.0
f5big-ip_application_acceleration_manager
12.1.0 ≤
𝑥
≤ 12.1.2
f5big-ip_application_acceleration_manager
13.0.0
f5big-ip_advanced_firewall_manager
12.1.0 ≤
𝑥
≤ 12.1.2
f5big-ip_advanced_firewall_manager
13.0.0
f5big-ip_analytics
12.1.0 ≤
𝑥
≤ 12.1.2
f5big-ip_analytics
13.0.0
f5big-ip_access_policy_manager
12.1.0 ≤
𝑥
≤ 12.1.2
f5big-ip_access_policy_manager
13.0.0
f5big-ip_application_security_manager
12.1.0 ≤
𝑥
≤ 12.1.2
f5big-ip_application_security_manager
13.0.0
f5big-ip_dns
12.1.0 ≤
𝑥
≤ 12.1.2
f5big-ip_dns
13.0.0
f5big-ip_global_traffic_manager
12.1.0 ≤
𝑥
≤ 12.1.2
f5big-ip_global_traffic_manager
13.0.0
f5big-ip_link_controller
12.1.0 ≤
𝑥
≤ 12.1.2
f5big-ip_link_controller
13.0.0
f5big-ip_policy_enforcement_manager
12.1.0 ≤
𝑥
≤ 12.1.2
f5big-ip_policy_enforcement_manager
13.0.0
f5big-ip_websafe
12.1.0 ≤
𝑥
≤ 12.1.2
f5big-ip_websafe
13.0.0
𝑥
= Vulnerable software versions