CVE-2017-6134: Input Validation

Q: What is the vulnerability ID?

The vulnerability ID is CVE-2017-6134.

Q: What software versions are affected?

The affected software versions are 13.0.0, 12.1.0 - 12.1.2, and 11.5.1 - 11.6.1.

Q: What is the severity of CVE-2017-6134?

The severity of CVE-2017-6134 is medium with a CVSS score of 6.5.

Q: What is the description of CVE-2017-6134?

CVE-2017-6134 is a vulnerability in F5 BIG-IP software that may cause TMM to crash when certain packets are received from an adjacent network.

Q: Where can I find more information about CVE-2017-6134?

You can find more information about CVE-2017-6134 at the following references: [1](http://www.securityfocus.com/bid/102466), [2](http://www.securitytracker.com/id/1040044), [3](http://www.securitytracker.com/id/1040045).

Published Dec 21, 2017

Updated

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, 12.1.0 - 12.1.2 and 11.5.1 - 11.6.1, an undisclosed sequence of packets, sourced from an adjacent network may cause TMM to crash.

Affected Software

33 affected components

F5 Big-ip Local Traffic Manager>=11.5.1<=11.6.1

F5 Big-ip Local Traffic Manager>=12.1.0<=12.1.2

F5 Big-ip Local Traffic Manager=13.0.0

F5 Big-ip Application Acceleration Manager>=11.5.1<=11.6.1

F5 Big-ip Application Acceleration Manager>=12.1.0<=12.1.2

F5 Big-ip Application Acceleration Manager=13.0.0

F5 BIG-IP Advanced Firewall Manager>=11.5.1<=11.6.1

F5 BIG-IP Advanced Firewall Manager>=12.1.0<=12.1.2

F5 BIG-IP Advanced Firewall Manager=13.0.0

F5 BIG-IP Analytics>=11.5.1<=11.6.1

F5 BIG-IP Analytics>=12.1.0<=12.1.2

F5 BIG-IP Analytics=13.0.0

F5 BIG-IP Access Policy Manager>=11.5.1<=11.6.1

F5 BIG-IP Access Policy Manager>=12.1.0<=12.1.2

F5 BIG-IP Access Policy Manager=13.0.0

F5 BIG-IP Application Security Manager>=11.5.1<=11.6.1

F5 BIG-IP Application Security Manager>=12.1.0<=12.1.2

F5 BIG-IP Application Security Manager=13.0.0

F5 BIG-IP DNS>=11.5.1<=11.6.1

F5 BIG-IP DNS>=12.1.0<=12.1.2

F5 BIG-IP DNS=13.0.0

F5 Big-ip Global Traffic Manager>=11.5.1<=11.6.1

F5 Big-ip Global Traffic Manager>=12.1.0<=12.1.2

F5 Big-ip Global Traffic Manager=13.0.0

F5 Big-ip Link Controller>=11.5.1<=11.6.1

F5 Big-ip Link Controller>=12.1.0<=12.1.2

F5 Big-ip Link Controller=13.0.0

F5 Big-ip Policy Enforcement Manager>=11.5.1<=11.6.1

F5 Big-ip Policy Enforcement Manager>=12.1.0<=12.1.2

F5 Big-ip Policy Enforcement Manager=13.0.0

F5 Big-ip Websafe>=11.5.1<=11.6.1

F5 Big-ip Websafe>=12.1.0<=12.1.2

F5 Big-ip Websafe=13.0.0

Event History

Dec 21, 2017

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2017-6134.

What software versions are affected?

The affected software versions are 13.0.0, 12.1.0 - 12.1.2, and 11.5.1 - 11.6.1.

What is the severity of CVE-2017-6134?