CVE-2017-6140

On the BIG-IP 2000s, 2200s, 4000s, 4200v, i5600, i5800, i7600, i7800, i10600,i10800, and VIPRION 4450 blades, running version 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 or 12.1.2 of BIG-IP LTM, AAM, AFM, Analytics, ASM, DNS, GTM or PEM, an undisclosed sequence of packets sent to Virtual Servers with client or server SSL profiles may cause disruption of data plane services.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
f5CNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
VendorProductVersion
f5big-ip_local_traffic_manager
11.5.0
f5big-ip_local_traffic_manager
11.5.1
f5big-ip_local_traffic_manager
11.5.2
f5big-ip_local_traffic_manager
11.5.3
f5big-ip_local_traffic_manager
11.5.4
f5big-ip_local_traffic_manager
11.6.0
f5big-ip_local_traffic_manager
11.6.1
f5big-ip_local_traffic_manager
12.0.0
f5big-ip_local_traffic_manager
12.1.0
f5big-ip_local_traffic_manager
12.1.1
f5big-ip_local_traffic_manager
12.1.2
f5big-ip_application_acceleration_manager
11.5.0
f5big-ip_application_acceleration_manager
11.5.1
f5big-ip_application_acceleration_manager
11.5.2
f5big-ip_application_acceleration_manager
11.5.3
f5big-ip_application_acceleration_manager
11.5.4
f5big-ip_application_acceleration_manager
11.6.0
f5big-ip_application_acceleration_manager
11.6.1
f5big-ip_application_acceleration_manager
12.0.0
f5big-ip_application_acceleration_manager
12.1.0
f5big-ip_application_acceleration_manager
12.1.1
f5big-ip_application_acceleration_manager
12.1.2
f5big-ip_advanced_firewall_manager
11.5.0
f5big-ip_advanced_firewall_manager
11.5.1
f5big-ip_advanced_firewall_manager
11.5.2
f5big-ip_advanced_firewall_manager
11.5.3
f5big-ip_advanced_firewall_manager
11.5.4
f5big-ip_advanced_firewall_manager
11.6.0
f5big-ip_advanced_firewall_manager
11.6.1
f5big-ip_advanced_firewall_manager
12.0.0
f5big-ip_advanced_firewall_manager
12.1.0
f5big-ip_advanced_firewall_manager
12.1.1
f5big-ip_advanced_firewall_manager
12.1.2
f5big-ip_analytics
11.5.0
f5big-ip_analytics
11.5.1
f5big-ip_analytics
11.5.2
f5big-ip_analytics
11.5.3
f5big-ip_analytics
11.5.4
f5big-ip_analytics
11.6.0
f5big-ip_analytics
11.6.1
f5big-ip_analytics
12.0.0
f5big-ip_analytics
12.1.0
f5big-ip_analytics
12.1.1
f5big-ip_analytics
12.1.2
f5big-ip_application_security_manager
11.5.0
f5big-ip_application_security_manager
11.5.1
f5big-ip_application_security_manager
11.5.2
f5big-ip_application_security_manager
11.5.3
f5big-ip_application_security_manager
11.5.4
f5big-ip_application_security_manager
11.6.0
f5big-ip_application_security_manager
11.6.1
f5big-ip_application_security_manager
12.0.0
f5big-ip_application_security_manager
12.1.0
f5big-ip_application_security_manager
12.1.1
f5big-ip_application_security_manager
12.1.2
f5big-ip_dns
11.5.0
f5big-ip_dns
11.5.1
f5big-ip_dns
11.5.2
f5big-ip_dns
11.5.3
f5big-ip_dns
11.5.4
f5big-ip_dns
11.6.0
f5big-ip_dns
11.6.1
f5big-ip_dns
12.0.0
f5big-ip_dns
12.1.0
f5big-ip_dns
12.1.1
f5big-ip_dns
12.1.2
f5big-ip_global_traffic_manager
11.5.0
f5big-ip_global_traffic_manager
11.5.1
f5big-ip_global_traffic_manager
11.5.2
f5big-ip_global_traffic_manager
11.5.3
f5big-ip_global_traffic_manager
11.5.4
f5big-ip_global_traffic_manager
11.6.0
f5big-ip_global_traffic_manager
11.6.1
f5big-ip_global_traffic_manager
12.0.0
f5big-ip_global_traffic_manager
12.1.0
f5big-ip_global_traffic_manager
12.1.1
f5big-ip_global_traffic_manager
12.1.2
f5big-ip_policy_enforcement_manager
11.5.0
f5big-ip_policy_enforcement_manager
11.5.1
f5big-ip_policy_enforcement_manager
11.5.2
f5big-ip_policy_enforcement_manager
11.5.3
f5big-ip_policy_enforcement_manager
11.5.4
f5big-ip_policy_enforcement_manager
11.6.0
f5big-ip_policy_enforcement_manager
11.6.1
f5big-ip_policy_enforcement_manager
12.0.0
f5big-ip_policy_enforcement_manager
12.1.0
f5big-ip_policy_enforcement_manager
12.1.1
f5big-ip_policy_enforcement_manager
12.1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securitytracker.com/id/1040042
https://support.f5.com/csp/article/K55102452
http://www.securitytracker.com/id/1040042
https://support.f5.com/csp/article/K55102452