CVE-2017-6137: Medium severity riverbed steelapp traffic manager vulnerability

Published May 9, 2017

Updated

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2, undisclosed traffic patterns received while software SYN cookie protection is engaged may cause a disruption of service to the Traffic Management Microkernel (TMM) on specific platforms and configurations.

Affected Software

50 affected components

F5 Big-ip Local Traffic Manager=11.6.1

F5 Big-ip Local Traffic Manager=12.0.0

F5 Big-ip Local Traffic Manager=12.1.0

F5 Big-ip Local Traffic Manager=12.1.1

F5 Big-ip Local Traffic Manager=12.1.2

F5 Big-ip Application Acceleration Manager=11.6.1

F5 Big-ip Application Acceleration Manager=12.0.0

F5 Big-ip Application Acceleration Manager=12.1.0

F5 Big-ip Application Acceleration Manager=12.1.1

F5 Big-ip Application Acceleration Manager=12.1.2

F5 BIG-IP Advanced Firewall Manager=11.6.1

F5 BIG-IP Advanced Firewall Manager=12.0.0

F5 BIG-IP Advanced Firewall Manager=12.1.0

F5 BIG-IP Advanced Firewall Manager=12.1.1

F5 BIG-IP Advanced Firewall Manager=12.1.2

F5 BIG-IP Analytics=11.6.1

F5 BIG-IP Analytics=12.0.0

F5 BIG-IP Analytics=12.1.0

F5 BIG-IP Analytics=12.1.1

F5 BIG-IP Analytics=12.1.2

F5 BIG-IP Access Policy Manager=11.6.1

F5 BIG-IP Access Policy Manager=12.0.0

F5 BIG-IP Access Policy Manager=12.1.0

F5 BIG-IP Access Policy Manager=12.1.1

F5 BIG-IP Access Policy Manager=12.1.2

F5 BIG-IP Application Security Manager=11.6.1

F5 BIG-IP Application Security Manager=12.0.0

F5 BIG-IP Application Security Manager=12.1.0

F5 BIG-IP Application Security Manager=12.1.1

F5 BIG-IP Application Security Manager=12.1.2

F5 Big-ip Domain Name System=12.0.0

F5 Big-ip Domain Name System=12.1.0

F5 Big-ip Domain Name System=12.1.1

F5 Big-ip Domain Name System=12.1.2

F5 Big-ip Global Traffic Manager=11.6.1

F5 Big-ip Link Controller=11.6.1

F5 Big-ip Link Controller=12.0.0

F5 Big-ip Link Controller=12.1.0

F5 Big-ip Link Controller=12.1.1

F5 Big-ip Link Controller=12.1.2

F5 Big-ip Policy Enforcement Manager=11.6.1

F5 Big-ip Policy Enforcement Manager=12.0.0

F5 Big-ip Policy Enforcement Manager=12.1.0

F5 Big-ip Policy Enforcement Manager=12.1.1

F5 Big-ip Policy Enforcement Manager=12.1.2

F5 Big-ip Websafe=11.6.1

F5 Big-ip Websafe=12.0.0

F5 Big-ip Websafe=12.1.0

F5 Big-ip Websafe=12.1.1

F5 Big-ip Websafe=12.1.2

Event History

May 9, 2017

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Frequently Asked Questions

What are the affected versions of F5 BIG-IP related to CVE-2017-6137?

The affected versions of F5 BIG-IP include 11.6.1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2.

What is the severity of CVE-2017-6137?

CVE-2017-6137 is considered a high severity vulnerability due to potential disruption in service.

How do I fix CVE-2017-6137?

To fix CVE-2017-6137, you should upgrade to a patched version provided by F5 for the affected products.

What type of vulnerability is CVE-2017-6137?

CVE-2017-6137 is a denial-of-service vulnerability that can disrupt service when SYN cookie protection is engaged.

Is there a workaround for CVE-2017-6137?

A specific workaround for CVE-2017-6137 is not detailed, so it is recommended to apply the available patch or upgrade.