5.9

CVE-2017-6163

In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, when a virtual server uses the standard configuration of HTTP/2 or SPDY profile with Client SSL profile, and the client initiates a number of concurrent streams beyond the advertised limit can cause a disruption of service. Remote client initiating stream beyond the advertised limit can cause a disruption of service. The Traffic Management Microkernel (TMM) data plane is exposed to this issue; the control plane is not exposed.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F5 ≫ Big-ip Local Traffic Manager Version >= 11.4.0 <= 11.5.3
F5 ≫ Big-ip Local Traffic Manager Version 11.6.0
F5 ≫ Big-ip Local Traffic Manager Version 11.6.1
F5 ≫ Big-ip Local Traffic Manager Version 12.0.0
F5 ≫ Big-ip Local Traffic Manager Version 12.1.0
F5 ≫ Big-ip Local Traffic Manager Version 12.1.1
F5 ≫ Big-ip Local Traffic Manager Version 12.1.2
F5 ≫ Big-ip Application Acceleration Manager Version >= 11.4.0 <= 11.5.4
F5 ≫ Big-ip Advanced Firewall Manager Version >= 11.4.0 <= 11.5.4
F5 ≫ Big-ip Access Policy Manager Version >= 11.5.0 <= 11.5.4
F5 ≫ Big-ip Access Policy Manager Version 11.6.0
F5 ≫ Big-ip Access Policy Manager Version 11.6.1
F5 ≫ Big-ip Access Policy Manager Version 12.0.0
F5 ≫ Big-ip Access Policy Manager Version 12.1.0
F5 ≫ Big-ip Access Policy Manager Version 12.1.1
F5 ≫ Big-ip Access Policy Manager Version 12.1.2
F5 ≫ Big-ip Application Security Manager Version >= 11.5.0 <= 11.5.4
F5 ≫ Big-ip Link Controller Version >= 11.5.0 <= 11.5.4
F5 ≫ Big-ip Link Controller Version 11.6.0
F5 ≫ Big-ip Link Controller Version 11.6.1
F5 ≫ Big-ip Link Controller Version 12.0.0
F5 ≫ Big-ip Link Controller Version 12.1.0
F5 ≫ Big-ip Link Controller Version 12.1.1
F5 ≫ Big-ip Link Controller Version 12.1.2
F5 ≫ Big-ip Policy Enforcement Manager Version >= 11.5.0 <= 11.5.4
F5 ≫ Big-ip Protocol Security Module Version > 11.4.0 <= 11.5.4
F5 ≫ Big-ip Protocol Security Module Version 11.6.0
F5 ≫ Big-ip Protocol Security Module Version 11.6.1
F5 ≫ Big-ip Protocol Security Module Version 12.0.0
F5 ≫ Big-ip Protocol Security Module Version 12.1.0
F5 ≫ Big-ip Protocol Security Module Version 12.1.1
F5 ≫ Big-ip Protocol Security Module Version 12.1.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.67% 0.738
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.9 2.2 3.6
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://www.securityfocus.com/bid/101606
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1039671
Third Party Advisory
VDB Entry
https://support.f5.com/csp/article/K22541983
Vendor Advisory