5.9

CVE-2017-6159

F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 are vulnerable to a denial of service attack when the MPTCP option is enabled on a virtual server. Data plane is vulnerable when using the MPTCP option of a TCP profile. There is no control plane exposure. An attacker may be able to disrupt services by causing TMM to restart hence temporarily failing to process traffic.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F5 ≫ Big-ip Local Traffic Manager Version 11.6.0
F5 ≫ Big-ip Local Traffic Manager Version 11.6.1
F5 ≫ Big-ip Local Traffic Manager Version 12.0.0
F5 ≫ Big-ip Local Traffic Manager Version 12.1.0
F5 ≫ Big-ip Local Traffic Manager Version 12.1.1
F5 ≫ Big-ip Local Traffic Manager Version 12.1.2
F5 ≫ Big-ip Access Policy Manager Version 11.6.0
F5 ≫ Big-ip Access Policy Manager Version 11.6.1
F5 ≫ Big-ip Access Policy Manager Version 12.0.0
F5 ≫ Big-ip Access Policy Manager Version 12.1.0
F5 ≫ Big-ip Access Policy Manager Version 12.1.1
F5 ≫ Big-ip Access Policy Manager Version 12.1.2
F5 ≫ Big-ip Link Controller Version 11.6.0
F5 ≫ Big-ip Link Controller Version 11.6.1
F5 ≫ Big-ip Link Controller Version 12.0.0
F5 ≫ Big-ip Link Controller Version 12.1.0
F5 ≫ Big-ip Link Controller Version 12.1.1
F5 ≫ Big-ip Link Controller Version 12.1.2
F5 ≫ Big-ip Websafe Version 1.0.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.59% 0.725
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.9 2.2 3.6
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/bid/101633
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039669
Third Party Advisory
VDB Entry
https://support.f5.com/csp/article/K10002335
Vendor Advisory