CVE-2017-6166

Severity Score

5.9

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel (TMM) may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4 profile. Traffic processing is disrupted while TMM restarts. If the affected BIG-IP system is configured as part of a device group, it will trigger a failover to the peer device.

En el software BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM y WebSafe desde la versión 12.0.0 a la 12.1.1, en algunos casos, el componente Traffic Management Microkernel (TMM) podría cerrarse inesperadamente al procesar paquetes fragmentados. Esta vulnerabilidad afecta al TMM mediante un servidor virtual configurado con perfil FastL4. El procesamiento del tráfico se interrumpe mientras el TMM (Traffic Management Microkernel) se reinicia. Si el sistema BIG-IP afectado está configurado como parte de un grupo de dispositivos, desencadenará una conmutación por error en el dispositivo del mismo nivel.

*Credits: N/A

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2017-02-21 CVE Reserved
2017-11-22 CVE Published
2023-05-25 EPSS Updated
2024-09-16 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-415: Double Free

CAPEC

References (3)

URL	Tag	Source
http://www.securityfocus.com/bid/102264	Third Party Advisory
http://www.securitytracker.com/id/1039949	Third Party Advisory

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://support.f5.com/csp/article/K65615624	2021-12-14

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
F5 Search vendor "F5"		Big-ip Afm Search vendor "F5" for product "Big-ip Afm"				>= 12.0.0 <= 12.1.1 Search vendor "F5" for product "Big-ip Afm" and version " >= 12.0.0 <= 12.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Analytics Search vendor "F5" for product "Big-ip Analytics"				>= 12.0.0 <= 12.1.1 Search vendor "F5" for product "Big-ip Analytics" and version " >= 12.0.0 <= 12.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Apm Search vendor "F5" for product "Big-ip Apm"				>= 12.0.0 <= 12.1.1 Search vendor "F5" for product "Big-ip Apm" and version " >= 12.0.0 <= 12.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Application Acceleration Manager Search vendor "F5" for product "Big-ip Application Acceleration Manager"				>= 12.0.0 <= 12.1.1 Search vendor "F5" for product "Big-ip Application Acceleration Manager" and version " >= 12.0.0 <= 12.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Asm Search vendor "F5" for product "Big-ip Asm"				>= 12.0.0 <= 12.1.1 Search vendor "F5" for product "Big-ip Asm" and version " >= 12.0.0 <= 12.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Dns Search vendor "F5" for product "Big-ip Dns"				>= 12.0.0 <= 12.1.1 Search vendor "F5" for product "Big-ip Dns" and version " >= 12.0.0 <= 12.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Link Controller Search vendor "F5" for product "Big-ip Link Controller"				>= 12.0.0 <= 12.1.1 Search vendor "F5" for product "Big-ip Link Controller" and version " >= 12.0.0 <= 12.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Ltm Search vendor "F5" for product "Big-ip Ltm"				>= 12.0.0 <= 12.1.1 Search vendor "F5" for product "Big-ip Ltm" and version " >= 12.0.0 <= 12.1.1"		-		Affected
F5 Search vendor "F5"		Big-ip Pem Search vendor "F5" for product "Big-ip Pem"				>= 12.0.0 <= 12.1.1 Search vendor "F5" for product "Big-ip Pem" and version " >= 12.0.0 <= 12.1.1"		-		Affected
F5 Search vendor "F5"		F5 Websafe Search vendor "F5" for product "F5 Websafe"				>= 12.0.0 <= 12.1.1 Search vendor "F5" for product "F5 Websafe" and version " >= 12.0.0 <= 12.1.1"		-		Affected
F5 Search vendor "F5"		Linerate Search vendor "F5" for product "Linerate"				>= 2.5.0 <= 2.6.2 Search vendor "F5" for product "Linerate" and version " >= 2.5.0 <= 2.6.2"		-		Affected