Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveF5CVE-2017-6166
HistoryNov 22, 2017 - 4:29 p.m.

CVE-2017-6166

2017-11-2216:29:00
CWE-415
f5
web.nvd.nist.gov
43
cve-2017-6166
big-ip
tmm
crash
fragmented packets
vulnerability
nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.6

Confidence

High

EPSS

0.003

Percentile

70.0%

JSON

In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel (TMM) may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4 profile. Traffic processing is disrupted while TMM restarts. If the affected BIG-IP system is configured as part of a device group, it will trigger a failover to the peer device.

Affected configurations

Nvd
Node
f5big-ip_afmRange12.0.0–12.1.1
OR
f5big-ip_analyticsRange12.0.0–12.1.1
OR
f5big-ip_apmRange12.0.0–12.1.1
OR
f5big-ip_application_acceleration_managerRange12.0.0–12.1.1
OR
f5big-ip_asmRange12.0.0–12.1.1
OR
f5big-ip_dnsRange12.0.0–12.1.1
OR
f5big-ip_link_controllerRange12.0.0–12.1.1
OR
f5big-ip_ltmRange12.0.0–12.1.1
OR
f5big-ip_pemRange12.0.0–12.1.1
OR
f5f5_websafeRange12.0.0–12.1.1
OR
f5linerateRange2.5.0–2.6.2
VendorProductVersionCPE
f5big-ip_afm*cpe:2.3:a:f5:big-ip_afm:*:*:*:*:*:*:*:*
f5big-ip_analytics*cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
f5big-ip_apm*cpe:2.3:a:f5:big-ip_apm:*:*:*:*:*:*:*:*
f5big-ip_application_acceleration_manager*cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
f5big-ip_asm*cpe:2.3:a:f5:big-ip_asm:*:*:*:*:*:*:*:*
f5big-ip_dns*cpe:2.3:a:f5:big-ip_dns:*:*:*:*:*:*:*:*
f5big-ip_link_controller*cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
f5big-ip_ltm*cpe:2.3:a:f5:big-ip_ltm:*:*:*:*:*:*:*:*
f5big-ip_pem*cpe:2.3:a:f5:big-ip_pem:*:*:*:*:*:*:*:*
f5f5_websafe*cpe:2.3:a:f5:f5_websafe:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 111

CNA Affected

[
  {
    "product": "BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe",
    "vendor": "F5 Networks, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "12.0.0, 12.1.1"
      }
    ]
  }
]

Related

nessus 1
cvelist 1
nvd 1
f5 1
prion 1
nessus
nessus
F5 Networks BIG-IP : BIG-IP FastL4 TMM vulnerability (K65615624)
2017-11-07 00:00:00
cvelist
cvelist
CVE-2017-6166
2017-11-22 16:00:00
nvd
nvd
CVE-2017-6166
2017-11-22 16:29:00
f5
f5
K65615624 : BIG-IP FastL4 TMM vulnerability CVE-2017-6166
2017-11-06 00:00:00
prion
prion
Code injection
2017-11-22 16:29:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.6

Confidence

High

EPSS

0.003

Percentile

70.0%

JSON
Related for CVE-2017-6166
nessus1cvelist1nvd1f51prion1