PT-2017-16913 · F5 · F5 Big-Ip

Publicado 2017-10-20 · Atualizado 2017-11-15 · CVE-2017-6141

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 12.1.0 through 12.1.2

Description The issue affects F5 BIG-IP when using a client SSL profile with the Session Ticket option enabled, which can cause disruption of service to the Traffic Management Microkernel (TMM) due to certain values in a TLS abbreviated handshake. The Session Ticket option is disabled by default.

Recommendations For versions 12.1.0 through 12.1.2, consider disabling the Session Ticket option in client SSL profiles to prevent disruption of service to the TMM until a patch is available.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-6141

Produtos afetados

F5 Big-Ip

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-6141 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-6141 · Aviso do Fabricante
• https://support.f5.com/csp/article/K21154730 · Aviso do Fabricante