CVE-2017-6147

MEDIUM

F5 BIG-IP - Denial of Service via SSL Forward Proxy Configuration

Title source: llm
STIX 2.1

Description

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of service when "SSL Forward Proxy" setting is enabled in both the Client and Server SSL profiles assigned to a BIG-IP Virtual Server.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/100981
Vendor Advisory x_refsource_confirm
https://support.f5.com/csp/article/K43945001

Scores

CVSS v3 5.9
EPSS 0.0067
EPSS Percentile 71.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (21)
f5/big-ip_access_policy_manager 12.1.2
f5/big-ip_access_policy_manager 13.0.0
f5/big-ip_advanced_firewall_manager 12.1.2
f5/big-ip_advanced_firewall_manager 13.0.0
f5/big-ip_analytics 12.1.2
f5/big-ip_analytics 13.0.0
f5/big-ip_application_acceleration_manager 12.1.2
f5/big-ip_application_acceleration_manager 13.0.0
f5/big-ip_application_security_manager 12.1.2
f5/big-ip_application_security_manager 13.0.0
... and 11 more
Published Sep 18, 2017
Tracked Since Feb 18, 2026