Code injection

2017-10-2714:29:00

PRIOn knowledge base

www.prio-n.com

5.6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.6%

JSON

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, 11.2.1, in some cases TMM may crash when processing TCP traffic. This vulnerability affects TMM via a virtual server configured with TCP profile. Traffic processing is disrupted while Traffic Management Microkernel (TMM) restarts. If the affected BIG-IP system is configured to be part of a device group, it will trigger a failover to the peer device.

CPENameOperatorVersion
big-ip_access_policy_managereq12.0.0
big-ip_access_policy_managereq11.2.1
big-ip_access_policy_managereq12.1.1
big-ip_access_policy_managereq12.1.0
big-ip_access_policy_managereq11.6.1
big-ip_access_policy_managereq11.6.0
big-ip_access_policy_managerge11.5.0
big-ip_access_policy_managerle11.5.4
big-ip_advanced_firewall_managereq12.1.0
big-ip_advanced_firewall_managereq11.2.1

Name	Operator	Version
big-ip_access_policy_manager	eq	12.0.0
big-ip_access_policy_manager	eq	11.2.1
big-ip_access_policy_manager	eq	12.1.1
big-ip_access_policy_manager	eq	12.1.0
big-ip_access_policy_manager	eq	11.6.1
big-ip_access_policy_manager	eq	11.6.0
big-ip_access_policy_manager	ge	11.5.0
big-ip_access_policy_manager	le	11.5.4
big-ip_advanced_firewall_manager	eq	12.1.0
big-ip_advanced_firewall_manager	eq	11.2.1