Lucene search
HistoryOct 26, 2013 - 5:55 p.m.
CVE-2013-6016
f5 big-ip
tmm
remote attack
denial of service
cve-2013-6016
security vulnerability
nvd
6.8 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.011 Low
EPSS
Percentile
84.3%
The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, APM, ASM, Edge Gateway, GTM, Link Controller, and WOM 10.0.0 through 10.2.2 and 11.0.0; Analytics 11.0.0; PSM 9.4.0 through 9.4.8, 10.0.0 through 10.2.4, and 11.0.0 through 11.4.1; and WebAccelerator 9.4.0 through 9.4.8, 10.0.0 through 10.2.4, and 11.0.0 through 11.3.0 might change a TCP connection to the ESTABLISHED state before receiving the ACK packet, which allows remote attackers to cause a denial of service (SIGFPE or assertion failure and TMM restart) via unspecified vectors.
Affected configurations
Node
f5big-ip_global_traffic_managerMatch10.0.0
ORf5big-ip_global_traffic_managerMatch10.0.1
ORf5big-ip_global_traffic_managerMatch10.1.0
ORf5big-ip_global_traffic_managerMatch10.2.0
ORf5big-ip_global_traffic_managerMatch10.2.1
ORf5big-ip_global_traffic_managerMatch10.2.2
ORf5big-ip_global_traffic_managerMatch11.0.0
Node
f5big-ip_webacceleratorMatch9.4.0
ORf5big-ip_webacceleratorMatch9.4.1
ORf5big-ip_webacceleratorMatch9.4.2
ORf5big-ip_webacceleratorMatch9.4.3
ORf5big-ip_webacceleratorMatch9.4.4
ORf5big-ip_webacceleratorMatch9.4.5
ORf5big-ip_webacceleratorMatch9.4.6
ORf5big-ip_webacceleratorMatch9.4.7
ORf5big-ip_webacceleratorMatch9.4.8
ORf5big-ip_webacceleratorMatch10.0.0
ORf5big-ip_webacceleratorMatch10.0.1
ORf5big-ip_webacceleratorMatch10.1.0
ORf5big-ip_webacceleratorMatch10.2.0
ORf5big-ip_webacceleratorMatch10.2.1
ORf5big-ip_webacceleratorMatch10.2.2
ORf5big-ip_webacceleratorMatch10.2.3
ORf5big-ip_webacceleratorMatch10.2.4
ORf5big-ip_webacceleratorMatch11.0.0
ORf5big-ip_webacceleratorMatch11.1.0
ORf5big-ip_webacceleratorMatch11.2.0
ORf5big-ip_webacceleratorMatch11.2.1
ORf5big-ip_webacceleratorMatch11.3.0
Node
f5big-ip_local_traffic_managerMatch10.0.0
ORf5big-ip_local_traffic_managerMatch10.0.1
ORf5big-ip_local_traffic_managerMatch10.1.0
ORf5big-ip_local_traffic_managerMatch10.2.0
ORf5big-ip_local_traffic_managerMatch10.2.1
ORf5big-ip_local_traffic_managerMatch10.2.2
ORf5big-ip_local_traffic_managerMatch11.0.0
Node
f5big-ip_application_security_managerMatch10.0.0
ORf5big-ip_application_security_managerMatch10.0.1
ORf5big-ip_application_security_managerMatch10.1.0
ORf5big-ip_application_security_managerMatch10.2.0
ORf5big-ip_application_security_managerMatch10.2.1
ORf5big-ip_application_security_managerMatch10.2.2
ORf5big-ip_application_security_managerMatch11.0.0
Node
f5big-ip_access_policy_managerMatch10.1.0
ORf5big-ip_access_policy_managerMatch10.2.0
ORf5big-ip_access_policy_managerMatch10.2.1
ORf5big-ip_access_policy_managerMatch10.2.2
ORf5big-ip_access_policy_managerMatch11.0.0
Node
f5big-ip_wan_optimization_managerMatch10.0.0
ORf5big-ip_wan_optimization_managerMatch10.0.1
ORf5big-ip_wan_optimization_managerMatch10.1.0
ORf5big-ip_wan_optimization_managerMatch10.2.0
ORf5big-ip_wan_optimization_managerMatch10.2.1
ORf5big-ip_wan_optimization_managerMatch10.2.2
ORf5big-ip_wan_optimization_managerMatch11.0.0
Node
f5big-ip_edge_gatewayMatch10.1.0
ORf5big-ip_edge_gatewayMatch10.2.0
ORf5big-ip_edge_gatewayMatch10.2.1
ORf5big-ip_edge_gatewayMatch10.2.2
ORf5big-ip_edge_gatewayMatch11.0.0
Node
f5big-ip_protocol_security_moduleMatch9.4.5
ORf5big-ip_protocol_security_moduleMatch9.4.6
ORf5big-ip_protocol_security_moduleMatch9.4.7
ORf5big-ip_protocol_security_moduleMatch9.4.8
ORf5big-ip_protocol_security_moduleMatch10.0.0
ORf5big-ip_protocol_security_moduleMatch10.0.1
ORf5big-ip_protocol_security_moduleMatch10.1.0
ORf5big-ip_protocol_security_moduleMatch10.2.0
ORf5big-ip_protocol_security_moduleMatch10.2.1
ORf5big-ip_protocol_security_moduleMatch10.2.2
ORf5big-ip_protocol_security_moduleMatch10.2.3
ORf5big-ip_protocol_security_moduleMatch10.2.4
ORf5big-ip_protocol_security_moduleMatch11.0.0
ORf5big-ip_protocol_security_moduleMatch11.1.0
ORf5big-ip_protocol_security_moduleMatch11.2.0
ORf5big-ip_protocol_security_moduleMatch11.2.1
ORf5big-ip_protocol_security_moduleMatch11.3.0
ORf5big-ip_protocol_security_moduleMatch11.4.0
ORf5big-ip_protocol_security_moduleMatch11.4.1
Node
f5big-ip_link_controllerMatch10.0.0
ORf5big-ip_link_controllerMatch10.0.1
ORf5big-ip_link_controllerMatch10.1.0
ORf5big-ip_link_controllerMatch10.2.0
ORf5big-ip_link_controllerMatch10.2.1
ORf5big-ip_link_controllerMatch10.2.2
ORf5big-ip_link_controllerMatch11.0.0
Related
f5
f5
SOL13233 - TMM vulnerability CVE-2013-6016
2011-12-12 00:00:00
K13233 : TMM vulnerability CVE-2013-6016
2013-12-03 00:00:00
cvelist
cvelist
CVE-2013-6016
2013-10-26 17:00:00
prion
prion
Design/Logic Flaw
2013-10-26 17:55:00
nessus
nessus
F5 Networks BIG-IP : TMM vulnerability (SOL13233)
2014-10-10 00:00:00
nvd
nvd
CVE-2013-6016
2013-10-26 17:55:03
6.8 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.011 Low
EPSS
Percentile
84.3%
Related for CVE-2013-6016