imPC@ndo IT

Tracker / CVE-2017-6166

CVE-2017-6166

Medium 5.9

In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel (TMM) may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4 profile. Traffic processing is disrupted while TMM restarts. If the affected BIG-IP system is configured as part of a device group, it will trigger a failover to the peer device.

Affected products and versions

f5 big-ip_afm · 12.0.0 → 12.1.1
f5 big-ip_analytics · 12.0.0 → 12.1.1
f5 big-ip_apm · 12.0.0 → 12.1.1
f5 big-ip_application_acceleration_manager · 12.0.0 → 12.1.1
f5 big-ip_asm · 12.0.0 → 12.1.1
f5 big-ip_dns · 12.0.0 → 12.1.1
f5 big-ip_link_controller · 12.0.0 → 12.1.1
f5 big-ip_ltm · 12.0.0 → 12.1.1
f5 big-ip_pem · 12.0.0 → 12.1.1
f5 f5_websafe · 12.0.0 → 12.1.1
f5 linerate · 2.5.0 → 2.6.2

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References