CVE-2017-6168

Summary of CVE-2017-6168 (F5 BIG-IP ROBOT Bleichenbacher issue) A vulnerability in BIG-IP virtual servers configured with a Client SSL profile can leak plaintext from RSA-based TLS handshakes and enable a MiTM attack, without compromising the server’s private RSA key. Affected versions and fixes ...

CVE-2017-6166

The CVE-2017-6166 issue affects multiple F5 BIG-IP components (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe) on versions 12.0.0–12.1.1, where the Traffic Management Microkernel (TMM) may crash while processing fragmented packets via a virtual server with a FastL4 profile...