medium5.9
CVE-2017-6166
In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkerne…
Impact
In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel (TMM) may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4 profile. Traffic processing is disrupted while TMM restarts. If the affected BIG-IP system is configured as part of a device group, it will trigger a failover to the peer device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F5 | Big-Ip Afm | from 12.0.0 through 12.1.1 |
| F5 | Big-Ip Analytics | from 12.0.0 through 12.1.1 |
| F5 | Big-Ip Apm | from 12.0.0 through 12.1.1 |
| F5 | Big-Ip Application Acceleration Manager | from 12.0.0 through 12.1.1 |
| F5 | Big-Ip Asm | from 12.0.0 through 12.1.1 |
| F5 | Big-Ip Dns | from 12.0.0 through 12.1.1 |
| F5 | Big-Ip Link Controller | from 12.0.0 through 12.1.1 |
| F5 | Big-Ip Ltm | from 12.0.0 through 12.1.1 |
| F5 | Big-Ip Pem | from 12.0.0 through 12.1.1 |
| F5 | F5 Websafe | from 12.0.0 through 12.1.1 |
| F5 | Linerate | from 2.5.0 through 2.6.2 |