K17232507 : OpenSSL vulnerability CVE-2016-0798

Security Advisory Description

Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory consumption) by providing an invalid username in a connection attempt, related to apps/s_server.c and crypto/srp/srp_vfy.c. (CVE-2016-0798)
Impact
None. The vulnerable function is not used or accessible in any F5 product; therefore, F5 products are not vulnerable to this denial-of-service (DoS) condition.