K19361245 : BIG-IP TMM vulnerability CVE-2017-6158

Security Advisory Description

The Traffic Management Microkernel (TMM) has a vulnerability related to the handling of invalid IP addresses. (CVE-2017-6158)

This issue is exposed only when all of the following conditions are met:

• You have disabled the Auto Last Hop setting at the Virtual Server, VLAN, Tunnel, or System Wide level.
• You have disabled Source VLAN Checking.

Note: The** Auto Last Hop** setting is

enabled
by default.
Impact

TMM generates a core file and restarts. The BIG-IP system fails over to the peer device if configured as part of a high availability (HA) device group.