CVE-2017-6141: Input Validation

Published Oct 20, 2017

Updated

In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 through 12.1.2, certain values in a TLS abbreviated handshake when using a client SSL profile with the Session Ticket option enabled may cause disruption of service to the Traffic Management Microkernel (TMM). The Session Ticket option is disabled by default.

Affected Software

24 affected components

F5 BIG-IP Access Policy Manager=12.1.0

F5 BIG-IP Access Policy Manager=12.1.1

F5 BIG-IP Access Policy Manager=12.1.2

F5 BIG-IP Advanced Firewall Manager=12.1.0

F5 BIG-IP Advanced Firewall Manager=12.1.1

F5 BIG-IP Advanced Firewall Manager=12.1.2

F5 Big-ip Application Acceleration Manager=12.1.0

F5 Big-ip Application Acceleration Manager=12.1.1

F5 Big-ip Application Acceleration Manager=12.1.2

F5 BIG-IP Application Security Manager=12.1.0

F5 BIG-IP Application Security Manager=12.1.1

F5 BIG-IP Application Security Manager=12.1.2

F5 Big-ip Link Controller=12.1.0

F5 Big-ip Link Controller=12.1.1

F5 Big-ip Link Controller=12.1.2

F5 Big-ip Local Traffic Manager=12.1.0

F5 Big-ip Local Traffic Manager=12.1.1

F5 Big-ip Local Traffic Manager=12.1.2

F5 Big-ip Policy Enforcement Manager=12.1.0

F5 Big-ip Policy Enforcement Manager=12.1.1

F5 Big-ip Policy Enforcement Manager=12.1.2

F5 Big-ip Websafe=12.1.0

F5 Big-ip Websafe=12.1.1

F5 Big-ip Websafe=12.1.2

Event History

Oct 20, 2017

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-6141?

CVE-2017-6141 has a medium severity rating as it can lead to a disruption of service for affected systems.

How do I fix CVE-2017-6141?

To fix CVE-2017-6141, you should upgrade to the latest patched version of F5 BIG-IP products that addresses this vulnerability.

Which F5 BIG-IP versions are affected by CVE-2017-6141?

CVE-2017-6141 affects F5 BIG-IP versions 12.1.0 through 12.1.2 across several modules including LTM and APM.

What kind of disruptions can CVE-2017-6141 cause?

CVE-2017-6141 can cause disruptions in service to the Traffic Management Microkernel (TMM), impacting the functionality of the devices.

Is there a workaround for CVE-2017-6141?

While the best solution is to apply the appropriate software update, users may also consider disabling the Session Ticket option in their SSL profiles as a temporary measure.