CVE-2016-7475: Input Validation
Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the Traffic Management Microkernel (TMM) may not properly clean-up pool member network connections when using SPDY or HTTP/2 virtual server profiles.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7475?
The severity of CVE-2016-7475 is high.
Which software versions are affected by CVE-2016-7475?
CVE-2016-7475 affects F5 Big-ip Access Policy Manager, F5 Big-ip Advanced Firewall Manager, F5 Big-ip Application Acceleration Manager, F5 BIG-IP Application Security Manager, F5 Big-ip Link Controller, F5 Big-ip Local Traffic Manager, F5 Big-ip Policy Enforcement Manager, and F5 Big-ip Protocol Security Module versions between 11.4.0 and 11.6.1, and between 12.0.0 and 12.1.0.
How does CVE-2016-7475 impact the Traffic Management Microkernel (TMM)?
Under certain circumstances, CVE-2016-7475 may cause the Traffic Management Microkernel (TMM) to not properly clean up pool member network connections when using SPDY or HTTP/2 virtual server profiles.
How do I fix CVE-2016-7475?
To fix CVE-2016-7475, update the affected software versions to versions higher than 11.6.1 or 12.1.0.
Where can I find more information about CVE-2016-7475?
You can find more information about CVE-2016-7475 at the following link: https://support.f5.com/csp/article/K01587042