CVE-2017-6154: Input Validation
On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memory under some circumstances when processing undisclosed types of data on systems with 48 or more CPU cores.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-6154?
CVE-2017-6154 is classified as a medium severity vulnerability due to potential system crashes affecting BIG-IP systems.
How do I fix CVE-2017-6154?
To fix CVE-2017-6154, upgrade your F5 BIG-IP Application Security Manager to versions 11.6.3, 12.1.4, or 13.1.0 and above.
Which F5 BIG-IP versions are affected by CVE-2017-6154?
CVE-2017-6154 affects F5 BIG-IP versions 11.6.1 - 11.6.2, 12.1.0 - 12.1.3.1, and 13.0.0.
What happens if my system is vulnerable to CVE-2017-6154?
If your system is vulnerable to CVE-2017-6154, it may experience unexpected crashes and core dumps when processing certain types of data.
Is there a workaround for CVE-2017-6154?
There is no documented workaround for CVE-2017-6154, hence upgrading to a patched version is recommended.