CVE-2017-6151: High severity riverbed steelapp traffic manager vulnerability
Published Dec 21, 2017
·Updated
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, undisclosed requests made to BIG-IP virtual servers which make use of the "HTTP/2 profile" may result in a disruption of service to TMM.
Affected Software
13 affected components
F5 Big-ip Local Traffic Manager=13.0.0
F5 Big-ip Application Acceleration Manager=13.0.0
F5 BIG-IP Advanced Firewall Manager=13.0.0
F5 BIG-IP Analytics=13.0.0
F5 BIG-IP Access Policy Manager=13.0.0
F5 BIG-IP Application Security Manager=13.0.0
F5 BIG-IP DNS=13.0.0
F5 Big-ip Global Traffic Manager=13.0.0
F5 Big-ip Link Controller=13.0.0
F5 Big-ip Policy Enforcement Manager=13.0.0
F5 Big-ip Websafe=13.0.0
F5 BIG-IP Edge Gateway=13.0.0
F5 Big-ip Webaccelerator=13.0.0
Event History
Dec 21, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this F5 BIG-IP vulnerability?
The vulnerability ID is CVE-2017-6151.
2
Which software versions are affected by this vulnerability?
The F5 BIG-IP software version 13.0.0 is affected.
3
Which F5 products are affected by this vulnerability?
F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe are affected.
4
What is the severity of CVE-2017-6151?
The severity of CVE-2017-6151 is high with a CVSS score of 7.5.
5
How can I fix this vulnerability?
Upgrade to the patched version of F5 BIG-IP software.