Lucene search

[email protected]NVD:CVE-2017-6159

HistoryOct 27, 2017 - 2:29 p.m.

CVE-2017-6159

2017-10-2714:29:00

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.003

Percentile

66.0%

JSON

F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 are vulnerable to a denial of service attack when the MPTCP option is enabled on a virtual server. Data plane is vulnerable when using the MPTCP option of a TCP profile. There is no control plane exposure. An attacker may be able to disrupt services by causing TMM to restart hence temporarily failing to process traffic.

Affected configurations

Nvd

Node

f5big-ip_local_traffic_managerMatch11.6.0

f5big-ip_local_traffic_managerMatch11.6.1

f5big-ip_local_traffic_managerMatch12.0.0

f5big-ip_local_traffic_managerMatch12.1.0

f5big-ip_local_traffic_managerMatch12.1.1

f5big-ip_local_traffic_managerMatch12.1.2

Node

f5big-ip_application_acceleration_managerMatch11.6.0

f5big-ip_application_acceleration_managerMatch11.6.1

f5big-ip_application_acceleration_managerMatch12.0.0

f5big-ip_application_acceleration_managerMatch12.1.0

f5big-ip_application_acceleration_managerMatch12.1.1

f5big-ip_application_acceleration_managerMatch12.1.2

Node

f5big-ip_advanced_firewall_managerMatch11.6.0

f5big-ip_advanced_firewall_managerMatch11.6.1

f5big-ip_advanced_firewall_managerMatch12.0.0

f5big-ip_advanced_firewall_managerMatch12.1.0

f5big-ip_advanced_firewall_managerMatch12.1.1

f5big-ip_advanced_firewall_managerMatch12.1.2

Node

f5big-ip_access_policy_managerMatch11.6.0

f5big-ip_access_policy_managerMatch11.6.1

f5big-ip_access_policy_managerMatch12.0.0

f5big-ip_access_policy_managerMatch12.1.0

f5big-ip_access_policy_managerMatch12.1.1

f5big-ip_access_policy_managerMatch12.1.2

Node

f5big-ip_application_security_managerMatch11.6.0

f5big-ip_application_security_managerMatch11.6.1

f5big-ip_application_security_managerMatch12.0.0

f5big-ip_application_security_managerMatch12.1.0

f5big-ip_application_security_managerMatch12.1.1

f5big-ip_application_security_managerMatch12.1.2

Node

f5big-ip_link_controllerMatch11.6.0

f5big-ip_link_controllerMatch11.6.1

f5big-ip_link_controllerMatch12.0.0

f5big-ip_link_controllerMatch12.1.0

f5big-ip_link_controllerMatch12.1.1

f5big-ip_link_controllerMatch12.1.2

Node

f5big-ip_policy_enforcement_managerMatch11.6.0

f5big-ip_policy_enforcement_managerMatch11.6.1

f5big-ip_policy_enforcement_managerMatch12.0.0

f5big-ip_policy_enforcement_managerMatch12.1.0

f5big-ip_policy_enforcement_managerMatch12.1.1

f5big-ip_policy_enforcement_managerMatch12.1.2

Node

f5big-ip_websafeMatch1.0.0

VendorProductVersionCPE
f5big-ip_local_traffic_manager11.6.0cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:*
f5big-ip_local_traffic_manager11.6.1cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1:*:*:*:*:*:*:*
f5big-ip_local_traffic_manager12.0.0cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*
f5big-ip_local_traffic_manager12.1.0cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0:*:*:*:*:*:*:*
f5big-ip_local_traffic_manager12.1.1cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.1:*:*:*:*:*:*:*
f5big-ip_local_traffic_manager12.1.2cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.2:*:*:*:*:*:*:*
f5big-ip_application_acceleration_manager11.6.0cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*
f5big-ip_application_acceleration_manager11.6.1cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1:*:*:*:*:*:*:*
f5big-ip_application_acceleration_manager12.0.0cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*
f5big-ip_application_acceleration_manager12.1.0cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
f5	big-ip_local_traffic_manager	11.6.0	cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:::::::*
f5	big-ip_local_traffic_manager	11.6.1	cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1:::::::*
f5	big-ip_local_traffic_manager	12.0.0	cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:::::::*
f5	big-ip_local_traffic_manager	12.1.0	cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0:::::::*
f5	big-ip_local_traffic_manager	12.1.1	cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.1:::::::*
f5	big-ip_local_traffic_manager	12.1.2	cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.2:::::::*
f5	big-ip_application_acceleration_manager	11.6.0	cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:::::::*
f5	big-ip_application_acceleration_manager	11.6.1	cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1:::::::*
f5	big-ip_application_acceleration_manager	12.0.0	cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:::::::*
f5	big-ip_application_acceleration_manager	12.1.0	cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:::::::*

Rows per page:

1-10 of 431

References

www.securityfocus.com/bid/101633

www.securitytracker.com/id/1039669

support.f5.com/csp/article/K10002335

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.003

Percentile

66.0%

JSON

Related for NVD:CVE-2017-6159

nessus1 cvelist1 cve1 prion1 f51