PT-2017-16909 · F5 · F5 Big-Ip

Published 2017-05-09 · Updated 2019-10-03 · CVE-2017-6137

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2

Description The issue concerns undisclosed traffic patterns that may disrupt the service to the Traffic Management Microkernel (TMM) when software SYN cookie protection is engaged. This can occur on specific platforms and configurations.

Recommendations For versions 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2, consider temporarily disabling software SYN cookie protection as a workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2017-6137

Affected Products

F5 Big-Ip

References · 4

• https://osv.dev/vulnerability/CVE-2017-6137 · Vendor Advisory
• https://support.f5.com/csp/article/K82851041 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6137 · Security Note
• http://securitytracker.com/id/1038409 · Note