PT-2017-16909 · F5 · F5 Big-Ip

Publicado 2017-05-09 · Atualizado 2019-10-03 · CVE-2017-6137

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2

Description The issue concerns undisclosed traffic patterns that may disrupt the service to the Traffic Management Microkernel (TMM) when software SYN cookie protection is engaged. This can occur on specific platforms and configurations.

Recommendations For versions 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2, consider temporarily disabling software SYN cookie protection as a workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2017-6137

Produtos afetados

F5 Big-Ip

Referências · 4

• http://securitytracker.com/id/1038409 · Nota
• https://osv.dev/vulnerability/CVE-2017-6137 · Aviso do Fabricante
• https://support.f5.com/csp/article/K82851041 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-6137 · Nota de Segurança