OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact by leveraging unexpected malloc behavior, related to s3_srvr.c, ssl_sess.c, and t1_lib.c. (CVE-2016-2177)

Impact

This vulnerability may allow remote attackers to cause a denial-of-service (DoS) attack.

CPENameOperatorVersion
big-ip ltmle12.1.2
big-ip afmle12.1.2
big-ip analyticsle12.1.2
big-ip apmle12.1.2
big-ip asmle12.1.2
big-ip dnsle12.1.2
big-ip edge gatewayle11.2.1
big-ip gtmle11.6.1
big-ip link controllerle12.1.2
big-ip pemle12.1.2

Name	Operator	Version
big-ip ltm	le	12.1.2
big-ip afm	le	12.1.2
big-ip analytics	le	12.1.2
big-ip apm	le	12.1.2
big-ip asm	le	12.1.2
big-ip dns	le	12.1.2
big-ip edge gateway	le	11.2.1
big-ip gtm	le	11.6.1
big-ip link controller	le	12.1.2
big-ip pem	le	12.1.2