CVE-2017-6129: Input Validation

Published Dec 21, 2017

Updated

In F5 BIG-IP APM software version 13.0.0 and 12.1.2, in some circumstances, APM tunneled VPN flows can cause a VPN/PPP connflow to be prematurely freed or cause TMM to stop responding with a "flow not in use" assertion. An attacker may be able to disrupt traffic or cause the BIG-IP system to fail over to another device in the device group.

Affected Software

2 affected components

F5 BIG-IP Access Policy Manager=12.1.2

F5 BIG-IP Access Policy Manager=13.0.0

Event History

Dec 21, 2017

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-6129?

CVE-2017-6129 has a high severity rating due to its potential to disrupt VPN traffic and cause system failures.

How do I fix CVE-2017-6129?

To fix CVE-2017-6129, upgrade your F5 BIG-IP APM software to the latest version that addresses this vulnerability.

What versions are affected by CVE-2017-6129?

CVE-2017-6129 affects F5 BIG-IP APM software versions 12.1.2 and 13.0.0.

What impact does CVE-2017-6129 have on security?

CVE-2017-6129 can allow attackers to disrupt VPN traffic, potentially leading to denial of service.

Is there a workaround for CVE-2017-6129?

There are no known workarounds for CVE-2017-6129; the best protection is to apply the relevant software updates.