CVE-2017-6133: Input Validation

Q: What is CVE-2017-6133?

CVE-2017-6133 is a vulnerability in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, which allows undisclosed HTTP requests to cause a denial of service.

Q: How severe is CVE-2017-6133?

CVE-2017-6133 has a severity rating of 7.5 (high).

Q: Which software versions are affected by CVE-2017-6133?

CVE-2017-6133 affects F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software versions 13.0.0 and 12.1.0 - 12.1.2.

Q: How can I fix CVE-2017-6133?

To fix CVE-2017-6133, it is recommended to upgrade to a version of F5 BIG-IP software that is not affected by this vulnerability.

Q: Where can I find more information about CVE-2017-6133?

More information about CVE-2017-6133 can be found on the following references: [SecurityFocus](http://www.securityfocus.com/bid/102467), [SecurityTracker](http://www.securitytracker.com/id/1040048), [F5 Support](https://support.f5.com/csp/article/K25033460).

Published Dec 21, 2017

Updated

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, undisclosed HTTP requests may cause a denial of service.

Affected Software

20 affected components

F5 Big-ip Local Traffic Manager>=12.1.0<=12.1.2

F5 Big-ip Local Traffic Manager=13.0.0

F5 Big-ip Application Acceleration Manager>=12.1.0<=12.1.2

F5 Big-ip Application Acceleration Manager=13.0.0

F5 BIG-IP Advanced Firewall Manager>=12.1.0<=12.1.2

F5 BIG-IP Advanced Firewall Manager=13.0.0

F5 BIG-IP Analytics>=12.1.0<=12.1.2

F5 BIG-IP Analytics=13.0.0

F5 BIG-IP Access Policy Manager>=12.1.0<=12.1.2

F5 BIG-IP Access Policy Manager=13.0.0

F5 BIG-IP Application Security Manager>=12.1.0<=12.1.2

F5 BIG-IP Application Security Manager=13.0.0

F5 BIG-IP DNS>=12.1.0<=12.1.2

F5 BIG-IP DNS=13.0.0

F5 Big-ip Link Controller>=12.1.0<=12.1.2

F5 Big-ip Link Controller=13.0.0

F5 Big-ip Policy Enforcement Manager>=12.1.0<=12.1.2

F5 Big-ip Policy Enforcement Manager=13.0.0

F5 Big-ip Websafe>=12.1.0<=12.1.2

F5 Big-ip Websafe=13.0.0

Event History

Dec 21, 2017

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2017-6133?

CVE-2017-6133 is a vulnerability in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, which allows undisclosed HTTP requests to cause a denial of service.

How severe is CVE-2017-6133?

CVE-2017-6133 has a severity rating of 7.5 (high).

Which software versions are affected by CVE-2017-6133?