PT-2017-16921 · F5 · F5 Big-Ip

Publicado 2017-10-27 · Atualizado 2017-11-16 · CVE-2017-6162

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP software versions 11.2.1, 11.4.0 through 11.5.4, 11.6.0 through 11.6.1, 12.0.0 through 12.1.2

Description The issue affects the Traffic Management Microkernel (TMM) when processing TCP traffic via a virtual server configured with a TCP profile. In some cases, TMM may crash, disrupting traffic processing until it restarts. If the affected system is part of a device group, it will trigger a failover to the peer device.

Recommendations For versions 11.2.1, consider disabling the TCP profile on virtual servers as a temporary workaround until a fix is available. For versions 11.4.0 through 11.5.4, restrict access to virtual servers configured with TCP profiles to minimize disruption. For versions 11.6.0 through 11.6.1, avoid using TCP traffic processing on affected systems until the issue is resolved. For versions 12.0.0 through 12.1.2, consider temporarily removing the affected virtual servers from the device group to prevent failovers.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2017-6162

Produtos afetados

F5 Big-Ip

Referências · 5

• http://securityfocus.com/bid/101635 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-6162 · Nota de Segurança
• https://support.f5.com/csp/article/K13421245 · Aviso do Fabricante
• http://securitytracker.com/id/1039673 · Nota
• https://osv.dev/vulnerability/CVE-2017-6162 · Aviso do Fabricante