7.8

CVE-2017-6150

Under certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles, when the Reassemble IP Fragments option is disabled (default), some specific large fragmented packets may restart the Traffic Management Microkernel (TMM).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F5 ≫ Big-ip Local Traffic Manager Version >= 12.1.0 <= 12.1.3.1
F5 ≫ Big-ip Local Traffic Manager Version 13.0.0
F5 ≫ Big-ip Application Acceleration Manager Version >= 12.1.0 <= 12.1.3.1
F5 ≫ Big-ip Advanced Firewall Manager Version >= 12.1.0 <= 12.1.3.1
F5 ≫ Big-ip Analytics Version >= 12.1.0 <= 12.1.3.1
F5 ≫ Big-ip Analytics Version 13.0.0
F5 ≫ Big-ip Access Policy Manager Version >= 12.1.0 <= 12.1.3.1
F5 ≫ Big-ip Access Policy Manager Version 13.0.0
F5 ≫ Big-ip Application Security Manager Version >= 12.1.0 <= 12.1.3.1
F5 ≫ Big-ip Dns Version >= 12.1.0 <= 12.1.3.1
F5 ≫ Big-ip Dns Version 13.0.0
F5 ≫ Big-ip Link Controller Version >= 12.1.0 <= 12.1.3.1
F5 ≫ Big-ip Link Controller Version 13.0.0
F5 ≫ Big-ip Policy Enforcement Manager Version >= 12.1.0 <= 12.1.3.1
F5 ≫ Big-ip Websafe Version >= 12.1.0 <= 12.1.3.1
F5 ≫ Big-ip Websafe Version 13.0.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.74% 0.755
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/bid/103235
Third Party Advisory
VDB Entry
https://support.f5.com/csp/article/K62712037
Vendor Advisory