F5 BIG-IP - TMM vulnerability CVE-2016-9245

Malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings. The issue is also exposed with the non-default SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted...

CVE-2016-9245

Summary of CVE-2016-9245 (F5 BIG-IP TMM) : Affected software includes BIG-IP 12.1.0–12.1.2. Malicious requests to virtual servers with an HTTP profile can cause the TMM to restart, with exposure also when BIG-IP APM is in use and when non-default Normalize URI configurations are applied in iRules...

F5 Networks BIG-IP : TMM vulnerability (K22216037)

Malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings. The issue is also exposed with the non-default 'Normalize URI' configuration options used in iRules and/or BIG-IP LTM policies...