CVE-2017-6140

EPSS 0.63%
Published 21.12.2017 17:29:00
Last modified 20.04.2025 01:37:25
Source f5sirt@f5.com
Teams watchlist Login
Open Login

On the BIG-IP 2000s, 2200s, 4000s, 4200v, i5600, i5800, i7600, i7800, i10600,i10800, and VIPRION 4450 blades, running version 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 or 12.1.2 of BIG-IP LTM, AAM, AFM, Analytics, ASM, DNS, GTM or PEM, an undisclosed sequence of packets sent to Virtual Servers with client or server SSL profiles may cause disruption of data plane services.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

F5 ≫ Big-ip Local Traffic Manager Version11.5.0

   F5 ≫ Big-ip 2000s Version-
   F5 ≫ Big-ip 2200s Version-
   F5 ≫ Big-ip 4000s Version-
   F5 ≫ Big-ip 4200v Version-
   F5 ≫ Big-ip I10600 Version-
   F5 ≫ Big-ip I10800 Version-
   F5 ≫ Big-ip I5600 Version-
   F5 ≫ Big-ip I5800 Version-
   F5 ≫ Big-ip I7600 Version-
   F5 ≫ Big-ip I7800 Version-
   F5 ≫ Viprion 4450 Blades Version-

F5 ≫ Big-ip Local Traffic Manager Version11.5.1

F5 ≫ Big-ip Local Traffic Manager Version11.5.2

F5 ≫ Big-ip Local Traffic Manager Version11.5.3

F5 ≫ Big-ip Local Traffic Manager Version11.5.4

F5 ≫ Big-ip Local Traffic Manager Version11.6.0

F5 ≫ Big-ip Local Traffic Manager Version11.6.1

F5 ≫ Big-ip Local Traffic Manager Version12.0.0

F5 ≫ Big-ip Local Traffic Manager Version12.1.0

F5 ≫ Big-ip Local Traffic Manager Version12.1.1

F5 ≫ Big-ip Local Traffic Manager Version12.1.2

F5 ≫ Big-ip Application Acceleration Manager Version11.5.0

F5 ≫ Big-ip Application Acceleration Manager Version11.5.1

F5 ≫ Big-ip Application Acceleration Manager Version11.5.2

F5 ≫ Big-ip Application Acceleration Manager Version11.5.3

F5 ≫ Big-ip Application Acceleration Manager Version11.5.4

F5 ≫ Big-ip Application Acceleration Manager Version11.6.0

F5 ≫ Big-ip Application Acceleration Manager Version11.6.1

F5 ≫ Big-ip Application Acceleration Manager Version12.0.0

F5 ≫ Big-ip Application Acceleration Manager Version12.1.0

F5 ≫ Big-ip Application Acceleration Manager Version12.1.1

F5 ≫ Big-ip Application Acceleration Manager Version12.1.2

F5 ≫ Big-ip Advanced Firewall Manager Version11.5.0

F5 ≫ Big-ip Advanced Firewall Manager Version11.5.1

F5 ≫ Big-ip Advanced Firewall Manager Version11.5.2

F5 ≫ Big-ip Advanced Firewall Manager Version11.5.3

F5 ≫ Big-ip Advanced Firewall Manager Version11.5.4

F5 ≫ Big-ip Advanced Firewall Manager Version11.6.0

F5 ≫ Big-ip Advanced Firewall Manager Version11.6.1

F5 ≫ Big-ip Advanced Firewall Manager Version12.0.0

F5 ≫ Big-ip Advanced Firewall Manager Version12.1.0

F5 ≫ Big-ip Advanced Firewall Manager Version12.1.1

F5 ≫ Big-ip Advanced Firewall Manager Version12.1.2

F5 ≫ Big-ip Analytics Version11.5.0

F5 ≫ Big-ip Analytics Version11.5.1

F5 ≫ Big-ip Analytics Version11.5.2

F5 ≫ Big-ip Analytics Version11.5.3

F5 ≫ Big-ip Analytics Version11.5.4

F5 ≫ Big-ip Analytics Version11.6.0

F5 ≫ Big-ip Analytics Version11.6.1

F5 ≫ Big-ip Analytics Version12.0.0

F5 ≫ Big-ip Analytics Version12.1.0

F5 ≫ Big-ip Analytics Version12.1.1

F5 ≫ Big-ip Analytics Version12.1.2

F5 ≫ Big-ip Application Security Manager Version11.5.0

F5 ≫ Big-ip Application Security Manager Version11.5.1

F5 ≫ Big-ip Application Security Manager Version11.5.2

F5 ≫ Big-ip Application Security Manager Version11.5.3

F5 ≫ Big-ip Application Security Manager Version11.5.4

F5 ≫ Big-ip Application Security Manager Version11.6.0

F5 ≫ Big-ip Application Security Manager Version11.6.1

F5 ≫ Big-ip Application Security Manager Version12.0.0

F5 ≫ Big-ip Application Security Manager Version12.1.0

F5 ≫ Big-ip Application Security Manager Version12.1.1

F5 ≫ Big-ip Application Security Manager Version12.1.2

F5 ≫ Big-ip Dns Version11.5.0

F5 ≫ Big-ip Dns Version11.5.1

F5 ≫ Big-ip Dns Version11.5.2

F5 ≫ Big-ip Dns Version11.5.3

F5 ≫ Big-ip Dns Version11.5.4

F5 ≫ Big-ip Dns Version11.6.0

F5 ≫ Big-ip Dns Version11.6.1

F5 ≫ Big-ip Dns Version12.0.0

F5 ≫ Big-ip Dns Version12.1.0

F5 ≫ Big-ip Dns Version12.1.1

F5 ≫ Big-ip Dns Version12.1.2

F5 ≫ Big-ip Global Traffic Manager Version11.5.0

F5 ≫ Big-ip Global Traffic Manager Version11.5.1

F5 ≫ Big-ip Global Traffic Manager Version11.5.2

F5 ≫ Big-ip Global Traffic Manager Version11.5.3

F5 ≫ Big-ip Global Traffic Manager Version11.5.4

F5 ≫ Big-ip Global Traffic Manager Version11.6.0

F5 ≫ Big-ip Global Traffic Manager Version11.6.1

F5 ≫ Big-ip Global Traffic Manager Version12.0.0

F5 ≫ Big-ip Global Traffic Manager Version12.1.0

F5 ≫ Big-ip Global Traffic Manager Version12.1.1

F5 ≫ Big-ip Global Traffic Manager Version12.1.2

F5 ≫ Big-ip Policy Enforcement Manager Version11.5.0

F5 ≫ Big-ip Policy Enforcement Manager Version11.5.1

F5 ≫ Big-ip Policy Enforcement Manager Version11.5.2

F5 ≫ Big-ip Policy Enforcement Manager Version11.5.3

F5 ≫ Big-ip Policy Enforcement Manager Version11.5.4

F5 ≫ Big-ip Policy Enforcement Manager Version11.6.0

F5 ≫ Big-ip Policy Enforcement Manager Version11.6.1

F5 ≫ Big-ip Policy Enforcement Manager Version12.0.0

F5 ≫ Big-ip Policy Enforcement Manager Version12.1.0

F5 ≫ Big-ip Policy Enforcement Manager Version12.1.1

F5 ≫ Big-ip Policy Enforcement Manager Version12.1.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.63%	0.678

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securitytracker.com/id/1040042

Third Party Advisory

VDB Entry

https://support.f5.com/csp/article/K55102452

Vendor Advisory

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2017-6140

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-6140

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-6140

EUVD