5.9
CVE-2016-9247
- EPSS 1.89%
- Veröffentlicht 10.01.2017 16:59:00
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Erkennungen
Under certain conditions for BIG-IP systems using a virtual server with an associated FastL4 profile and TCP analytics profile, a specific sequence of packets may cause the Traffic Management Microkernel (TMM) to restart.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F5 ≫ Big-ip Local Traffic Manager Version 12.1.0
F5 ≫ Big-ip Local Traffic Manager Version 12.1.1
F5 ≫ Big-ip Application Acceleration Manager Version 12.1.0
F5 ≫ Big-ip Application Acceleration Manager Version 12.1.1
F5 ≫ Big-ip Advanced Firewall Manager Version 12.1.0
F5 ≫ Big-ip Advanced Firewall Manager Version 12.1.1
F5 ≫ Big-ip Analytics Version 12.1.0
F5 ≫ Big-ip Analytics Version 12.1.1
F5 ≫ Big-ip Access Policy Manager Version 12.1.0
F5 ≫ Big-ip Access Policy Manager Version 12.1.1
F5 ≫ Big-ip Application Security Manager Version 12.1.0
F5 ≫ Big-ip Application Security Manager Version 12.1.1
F5 ≫ Big-ip Domain Name System Version 12.1.0
F5 ≫ Big-ip Domain Name System Version 12.1.1
F5 ≫ Big-ip Link Controller Version 12.1.0
F5 ≫ Big-ip Link Controller Version 12.1.1
F5 ≫ Big-ip Policy Enforcement Manager Version 12.1.0
F5 ≫ Big-ip Policy Enforcement Manager Version 12.1.1
F5 ≫ Big-ip Websafe Version 12.1.0
F5 ≫ Big-ip Websafe Version 12.1.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.89% | 0.768 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.9 | 2.2 | 3.6 |
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| NIST | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://www.securityfocus.com/bid/95405
http://www.securitytracker.com/id/1037581
https://support.f5.com/csp/#/article/K33500120