CVE-2016-9253: Input Validation
Published May 9, 2017
·Updated
In F5 BIG-IP 12.1.0 through 12.1.2, specific websocket traffic patterns may cause a disruption of service for virtual servers configured to use the websocket profile.
Affected Software
30 affected components
F5 Big-ip Local Traffic Manager=12.1.0
F5 Big-ip Local Traffic Manager=12.1.1
F5 Big-ip Local Traffic Manager=12.1.2
F5 Big-ip Application Acceleration Manager=12.1.0
F5 Big-ip Application Acceleration Manager=12.1.1
F5 Big-ip Application Acceleration Manager=12.1.2
F5 BIG-IP Advanced Firewall Manager=12.1.0
F5 BIG-IP Advanced Firewall Manager=12.1.1
F5 BIG-IP Advanced Firewall Manager=12.1.2
F5 BIG-IP Analytics=12.1.0
F5 BIG-IP Analytics=12.1.1
F5 BIG-IP Analytics=12.1.2
F5 BIG-IP Access Policy Manager=12.1.0
F5 BIG-IP Access Policy Manager=12.1.1
F5 BIG-IP Access Policy Manager=12.1.2
F5 BIG-IP Application Security Manager=12.1.0
F5 BIG-IP Application Security Manager=12.1.1
F5 BIG-IP Application Security Manager=12.1.2
F5 Big-ip Domain Name System=12.1.0
F5 Big-ip Domain Name System=12.1.1
F5 Big-ip Domain Name System=12.1.2
F5 Big-ip Link Controller=12.1.0
F5 Big-ip Link Controller=12.1.1
F5 Big-ip Link Controller=12.1.2
F5 Big-ip Policy Enforcement Manager=12.1.0
F5 Big-ip Policy Enforcement Manager=12.1.1
F5 Big-ip Policy Enforcement Manager=12.1.2
F5 Big-ip Websafe=12.1.0
F5 Big-ip Websafe=12.1.1
F5 Big-ip Websafe=12.1.2
Event History
May 9, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-9253?
The severity of CVE-2016-9253 is significant as it can disrupt service for virtual servers using the websocket profile.
2
How do I fix CVE-2016-9253?
To fix CVE-2016-9253, upgrade F5 BIG-IP to version 12.1.3 or later.
3
Which versions are affected by CVE-2016-9253?
CVE-2016-9253 affects F5 BIG-IP versions 12.1.0 to 12.1.2.
4
What type of vulnerability is CVE-2016-9253?
CVE-2016-9253 is a denial-of-service vulnerability affecting websocket traffic.
5
What products are impacted by CVE-2016-9253?
CVE-2016-9253 impacts several F5 BIG-IP products including Local Traffic Manager, Application Security Manager, and others within the 12.1.0 to 12.1.2 versions.