CVE-2017-0303

🗓️ 27 Oct 2017 14:00:00Reported by f5Type

In F5 BIG-IP software version 13.0.0, 12.0.0 to 12.1.2, and 11.5.1 to 11.6.1, connections handled by a Virtual Server with an associated SOCKS profile may not be properly cleaned up, potentially leading to resource starvation

Reporter	Title	Published	Views	Family All 8
BDU FSTEC	The vulnerability of the SOCKS proxy server of the BIG-IP Websafe security solution, the BIG-IP Policy Enforcement Manager, a system for controlling and managing network traffic, the BIG-IP Application Security Manager, a system for balancing local traffic, the BIG-IP Link Controller, a system for balancing internet traffic, the BIG-IP Application Acceleration Manager, the BIG-IP Advanced Firewall Manager, and the BIG-IP Access Policy Manager—these tools enable a hacker to cause a service failure.	21 Dec 201700:00	–	bdu_fstec
CNVD	F5 BIG-IP Denial of Service Vulnerability (CNVD-2017-35570)	30 Oct 201700:00	–	cnvd
CVE	CVE-2017-0303	27 Oct 201714:00	–	cve
EUVD	EUVD-2017-0659	7 Oct 202500:30	–	euvd
F5 Networks	K30201296: SOCKS proxy vulnerability CVE-2017-0303	21 Feb 202318:59	–	f5
Tenable Nessus	F5 Networks BIG-IP : SOCKS proxy vulnerability (K30201296)	27 Oct 201700:00	–	nessus
NVD	CVE-2017-0303	27 Oct 201714:29	–	nvd
Prion	Design/Logic Flaw	27 Oct 201714:29	–	prion

[
  {
    "product": "BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe",
    "vendor": "F5 Networks, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "13.0.0"
      },
      {
        "status": "affected",
        "version": "12.0.0 - 12.1.2"
      },
      {
        "status": "affected",
        "version": "11.5.1 - 11.6.1"
      }
    ]
  }
]

Source	Link
support	www.support.f5.com/csp/article/K30201296
securitytracker	www.securitytracker.com/id/1039674
securityfocus	www.securityfocus.com/bid/101612

01 Nov 2017 09:57Current

7.5High risk

Vulners AI Score7.5

EPSS0.02438