CVE-2017-6166

MEDIUM

BIG-IP 12.0.0-12.1.1 Use-After-Free in TMM via Fragmented Packets

Title source: llm

Description

In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel (TMM) may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4 profile. Traffic processing is disrupted while TMM restarts. If the affected BIG-IP system is configured as part of a device group, it will trigger a failover to the peer device.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/102264

Issue Tracking, Mitigation, Vendor Advisory x_refsource_confirm

https://support.f5.com/csp/article/K65615624

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1039949

Scores

CVSS v3 5.9

EPSS 0.0120

EPSS Percentile 79.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-415

Status published

Products (12)

f5/big-ip_afm 12.0.0 - 12.1.1

f5/big-ip_analytics 12.0.0 - 12.1.1

f5/big-ip_apm 12.0.0 - 12.1.1

f5/big-ip_application_acceleration_manager 12.0.0 - 12.1.1

f5/big-ip_asm 12.0.0 - 12.1.1

f5/big-ip_dns 12.0.0 - 12.1.1

f5/big-ip_link_controller 12.0.0 - 12.1.1

f5/big-ip_ltm 12.0.0 - 12.1.1

f5/big-ip_pem 12.0.0 - 12.1.1

f5/f5_websafe 12.0.0 - 12.1.1

... and 2 more

Published Nov 22, 2017

Tracked Since Feb 18, 2026