CVE-2017-6148: Input Validation

Q: What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2017-6148.

Q: What is the severity level of CVE-2017-6148?

The severity level of CVE-2017-6148 is high with a value of 7.5.

Q: Which software versions are affected by CVE-2017-6148?

CVE-2017-6148 affects F5 BIG-IP versions 11.5.1-11.5.5, 11.6.1-11.6.2, 12.0.0-12.1.3.1, and 13.0.0.

Q: What is the impact of CVE-2017-6148?

CVE-2017-6148 may cause a disruption of services provided by TMM when a SOCKS proxy profile is attached to a Virtual Server.

Q: Where can I find more information about CVE-2017-6148?

You can find more information about CVE-2017-6148 at the following link: https://support.f5.com/csp/article/K55225440

Published Apr 13, 2018

Updated

Responses to SOCKS proxy requests made through F5 BIG-IP version 13.0.0, 12.0.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5 may cause a disruption of services provided by TMM. The data plane is impacted and exposed only when a SOCKS proxy profile is attached to a Virtual Server. The control plane is not impacted by this vulnerability.

Affected Software

32 affected components

F5 Big-ip Local Traffic Manager>=11.5.1<=11.5.5

F5 Big-ip Local Traffic Manager>=11.6.1<=11.6.2

F5 Big-ip Local Traffic Manager>=12.0.0<=12.1.3

F5 Big-ip Local Traffic Manager=13.0.0

F5 Big-ip Application Acceleration Manager>=11.5.1<=11.5.5

F5 Big-ip Application Acceleration Manager>=11.6.1<=11.6.2

F5 Big-ip Application Acceleration Manager>=12.0.0<=12.1.3

F5 Big-ip Application Acceleration Manager=13.0.0

F5 BIG-IP Advanced Firewall Manager>=11.5.1<=11.5.5

F5 BIG-IP Advanced Firewall Manager>=11.6.1<=11.6.2

F5 BIG-IP Advanced Firewall Manager>=12.0.0<=12.1.3

F5 BIG-IP Advanced Firewall Manager=13.0.0

F5 BIG-IP Access Policy Manager>=11.5.1<=11.5.5

F5 BIG-IP Access Policy Manager>=11.6.1<=11.6.2

F5 BIG-IP Access Policy Manager>=12.0.0<=12.1.3

F5 BIG-IP Access Policy Manager=13.0.0

F5 BIG-IP Application Security Manager>=11.5.1<=11.5.5

F5 BIG-IP Application Security Manager>=11.6.1<=11.6.2

F5 BIG-IP Application Security Manager>=12.0.0<=12.1.3

F5 BIG-IP Application Security Manager=13.0.0

F5 Big-ip Link Controller>=11.5.1<=11.5.5

F5 Big-ip Link Controller>=11.6.1<=11.6.2

F5 Big-ip Link Controller>=12.0.0<=12.1.3

F5 Big-ip Link Controller=13.0.0

F5 Big-ip Policy Enforcement Manager>=11.5.1<=11.5.5

F5 Big-ip Policy Enforcement Manager>=11.6.1<=11.6.2

F5 Big-ip Policy Enforcement Manager>=12.0.0<=12.1.3

F5 Big-ip Policy Enforcement Manager=13.0.0

F5 Big-ip Websafe>=11.5.1<=11.5.5

F5 Big-ip Websafe>=11.6.1<=11.6.2

F5 Big-ip Websafe>=12.0.0<=12.1.3

F5 Big-ip Websafe=13.0.0

Event History

Apr 13, 2018

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2017-6148.

What is the severity level of CVE-2017-6148?

The severity level of CVE-2017-6148 is high with a value of 7.5.

Which software versions are affected by CVE-2017-6148?