CVE-2017-6132: Input Validation
Published Dec 21, 2017
·Updated
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 and 11.5.0 - 11.5.4, an undisclosed sequence of packets sent to BIG-IP High Availability state mirror listeners (primary and/or secondary IP) may cause TMM to restart.
Affected Software
88 affected components
F5 Big-ip Local Traffic Manager>=11.6.0<=11.6.1
F5 Big-ip Local Traffic Manager>=12.0.0<=12.1.2
F5 Big-ip Local Traffic Manager=11.5.0
F5 Big-ip Local Traffic Manager=11.5.1
F5 Big-ip Local Traffic Manager=11.5.2
F5 Big-ip Local Traffic Manager=11.5.3
F5 Big-ip Local Traffic Manager=11.5.4
F5 Big-ip Local Traffic Manager=13.0.0
F5 Big-ip Application Acceleration Manager>=11.6.0<=11.6.1
F5 Big-ip Application Acceleration Manager>=12.0.0<=12.1.2
F5 Big-ip Application Acceleration Manager=11.5.0
F5 Big-ip Application Acceleration Manager=11.5.1
F5 Big-ip Application Acceleration Manager=11.5.2
F5 Big-ip Application Acceleration Manager=11.5.3
F5 Big-ip Application Acceleration Manager=11.5.4
F5 Big-ip Application Acceleration Manager=13.0.0
F5 BIG-IP Advanced Firewall Manager>=11.6.0<=11.6.1
F5 BIG-IP Advanced Firewall Manager>=12.0.0<=12.1.2
F5 BIG-IP Advanced Firewall Manager=11.5.0
F5 BIG-IP Advanced Firewall Manager=11.5.1
F5 BIG-IP Advanced Firewall Manager=11.5.2
F5 BIG-IP Advanced Firewall Manager=11.5.3
F5 BIG-IP Advanced Firewall Manager=11.5.4
F5 BIG-IP Advanced Firewall Manager=13.0.0
F5 BIG-IP Analytics>=11.6.0<=11.6.1
F5 BIG-IP Analytics>=12.0.0<=12.1.2
F5 BIG-IP Analytics=11.5.0
F5 BIG-IP Analytics=11.5.1
F5 BIG-IP Analytics=11.5.2
F5 BIG-IP Analytics=11.5.3
F5 BIG-IP Analytics=11.5.4
F5 BIG-IP Analytics=13.0.0
F5 BIG-IP Access Policy Manager>=11.6.0<=11.6.1
F5 BIG-IP Access Policy Manager>=12.0.0<=12.1.2
F5 BIG-IP Access Policy Manager=11.5.0
F5 BIG-IP Access Policy Manager=11.5.1
F5 BIG-IP Access Policy Manager=11.5.2
F5 BIG-IP Access Policy Manager=11.5.3
F5 BIG-IP Access Policy Manager=11.5.4
F5 BIG-IP Access Policy Manager=13.0.0
F5 BIG-IP Application Security Manager>=11.6.0<=11.6.1
F5 BIG-IP Application Security Manager>=12.0.0<=12.1.2
F5 BIG-IP Application Security Manager=11.5.0
F5 BIG-IP Application Security Manager=11.5.1
F5 BIG-IP Application Security Manager=11.5.2
F5 BIG-IP Application Security Manager=11.5.3
F5 BIG-IP Application Security Manager=11.5.4
F5 BIG-IP Application Security Manager=13.0.0
F5 BIG-IP DNS>=11.6.0<=11.6.1
F5 BIG-IP DNS>=12.0.0<=12.1.2
F5 BIG-IP DNS=11.5.0
F5 BIG-IP DNS=11.5.1
F5 BIG-IP DNS=11.5.2
F5 BIG-IP DNS=11.5.3
F5 BIG-IP DNS=11.5.4
F5 BIG-IP DNS=13.0.0
F5 Big-ip Global Traffic Manager>=11.6.0<=11.6.1
F5 Big-ip Global Traffic Manager>=12.0.0<=12.1.2
F5 Big-ip Global Traffic Manager=11.5.0
F5 Big-ip Global Traffic Manager=11.5.1
F5 Big-ip Global Traffic Manager=11.5.2
F5 Big-ip Global Traffic Manager=11.5.3
F5 Big-ip Global Traffic Manager=11.5.4
F5 Big-ip Global Traffic Manager=13.0.0
F5 Big-ip Link Controller>=11.6.0<=11.6.1
F5 Big-ip Link Controller>=12.0.0<=12.1.2
F5 Big-ip Link Controller=11.5.0
F5 Big-ip Link Controller=11.5.1
F5 Big-ip Link Controller=11.5.2
F5 Big-ip Link Controller=11.5.3
F5 Big-ip Link Controller=11.5.4
F5 Big-ip Link Controller=13.0.0
F5 Big-ip Policy Enforcement Manager>=11.6.0<=11.6.1
F5 Big-ip Policy Enforcement Manager>=12.0.0<=12.1.2
F5 Big-ip Policy Enforcement Manager=11.5.0
F5 Big-ip Policy Enforcement Manager=11.5.1
F5 Big-ip Policy Enforcement Manager=11.5.2
F5 Big-ip Policy Enforcement Manager=11.5.3
F5 Big-ip Policy Enforcement Manager=11.5.4
F5 Big-ip Policy Enforcement Manager=13.0.0
F5 Big-ip Websafe>=11.6.0<=11.6.1
F5 Big-ip Websafe>=12.0.0<=12.1.2
F5 Big-ip Websafe=11.5.0
F5 Big-ip Websafe=11.5.1
F5 Big-ip Websafe=11.5.2
F5 Big-ip Websafe=11.5.3
F5 Big-ip Websafe=11.5.4
F5 Big-ip Websafe=13.0.0
Event History
Dec 21, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-6132?
The severity of CVE-2017-6132 is high with a CVSS score of 7.5.
2
How can I mitigate CVE-2017-6132 vulnerability?
To mitigate CVE-2017-6132, it is recommended to update the affected F5 BIG-IP software versions to the patched versions provided by the vendor.
3
What software versions of F5 BIG-IP are affected by CVE-2017-6132?
F5 BIG-IP software version 13.0.0, 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, and 11.5.0 to 11.5.4 are affected by CVE-2017-6132.
4
Are there any public references available for CVE-2017-6132?
Yes, public references for CVE-2017-6132 can be found at http://www.securityfocus.com/bid/102333, http://www.securitytracker.com/id/1040049, and https://support.f5.com/csp/article/K12044607.