CVE-2017-6147

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of service when "SSL Forward Proxy" setting is enabled in both the Client and Server SSL profiles assigned to a BIG-IP Virtual Server.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
f5CNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 70%
VendorProductVersion
f5big-ip_local_traffic_manager
12.1.2
f5big-ip_local_traffic_manager
13.0.0
f5big-ip_application_acceleration_manager
12.1.2
f5big-ip_application_acceleration_manager
13.0.0
f5big-ip_advanced_firewall_manager
12.1.2
f5big-ip_advanced_firewall_manager
13.0.0
f5big-ip_analytics
12.1.2
f5big-ip_analytics
13.0.0
f5big-ip_access_policy_manager
12.1.2
f5big-ip_access_policy_manager
13.0.0
f5big-ip_application_security_manager
12.1.2
f5big-ip_application_security_manager
13.0.0
f5big-ip_domain_name_system
12.1.2
f5big-ip_domain_name_system
13.0.0
f5big-ip_link_controller
12.1.2
f5big-ip_link_controller
13.0.0
f5big-ip_policy_enforcement_manager
12.1.2
f5big-ip_policy_enforcement_manager
13.0.0
f5big-ip_websafe
12.1.2
f5big-ip_websafe
13.0.0
𝑥
= Vulnerable software versions
References
http://www.securityfocus.com/bid/100981
https://support.f5.com/csp/article/K43945001
http://www.securityfocus.com/bid/100981
https://support.f5.com/csp/article/K43945001