CVE-2017-6158: Medium severity riverbed steelapp traffic manager vulnerability
Published Apr 13, 2018
·Updated
In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling of invalid IP addresses.
Affected Software
52 affected components
F5 Big-ip Local Traffic Manager>=11.5.1<=11.5.5
F5 Big-ip Local Traffic Manager>=11.6.0<=11.6.1
F5 Big-ip Local Traffic Manager>=12.0.0<=12.1.2
F5 Big-ip Local Traffic Manager=11.2.1
F5 Big-ip Application Acceleration Manager>=11.5.1<=11.5.5
F5 Big-ip Application Acceleration Manager>=11.6.0<=11.6.1
F5 Big-ip Application Acceleration Manager>=12.0.0<=12.1.2
F5 Big-ip Application Acceleration Manager=11.2.1
F5 BIG-IP Advanced Firewall Manager>=11.5.1<=11.5.5
F5 BIG-IP Advanced Firewall Manager>=11.6.0<=11.6.1
F5 BIG-IP Advanced Firewall Manager>=12.0.0<=12.1.2
F5 BIG-IP Advanced Firewall Manager=11.2.1
F5 BIG-IP Analytics>=11.5.1<=11.5.5
F5 BIG-IP Analytics>=11.6.0<=11.6.1
F5 BIG-IP Analytics>=12.0.0<=12.1.2
F5 BIG-IP Analytics=11.2.1
F5 BIG-IP Access Policy Manager>=11.5.1<=11.5.5
F5 BIG-IP Access Policy Manager>=11.6.0<=11.6.1
F5 BIG-IP Access Policy Manager>=12.0.0<=12.1.2
F5 BIG-IP Access Policy Manager=11.2.1
F5 BIG-IP Application Security Manager>=11.5.1<=11.5.5
F5 BIG-IP Application Security Manager>=11.6.0<=11.6.1
F5 BIG-IP Application Security Manager>=12.0.0<=12.1.2
F5 BIG-IP Application Security Manager=11.2.1
F5 BIG-IP Edge Gateway>=11.5.1<=11.5.5
F5 BIG-IP Edge Gateway>=11.6.0<=11.6.1
F5 BIG-IP Edge Gateway>=12.0.0<=12.1.2
F5 BIG-IP Edge Gateway=11.2.1
F5 Big-ip Global Traffic Manager>=11.5.1<=11.5.5
F5 Big-ip Global Traffic Manager>=11.6.0<=11.6.1
F5 Big-ip Global Traffic Manager>=12.0.0<=12.1.2
F5 Big-ip Global Traffic Manager=11.2.1
F5 Big-ip Link Controller>=11.5.1<=11.5.5
F5 Big-ip Link Controller>=11.6.0<=11.6.1
F5 Big-ip Link Controller>=12.0.0<=12.1.2
F5 Big-ip Link Controller=11.2.1
F5 Big-ip Policy Enforcement Manager>=11.5.1<=11.5.5
F5 Big-ip Policy Enforcement Manager>=11.6.0<=11.6.1
F5 Big-ip Policy Enforcement Manager>=12.0.0<=12.1.2
F5 Big-ip Policy Enforcement Manager=11.2.1
F5 Big-ip Webaccelerator>=11.5.1<=11.5.5
F5 Big-ip Webaccelerator>=11.6.0<=11.6.1
F5 Big-ip Webaccelerator>=12.0.0<=12.1.2
F5 Big-ip Webaccelerator=11.2.1
F5 Big-ip Websafe>=11.5.1<=11.5.5
F5 Big-ip Websafe>=11.6.0<=11.6.1
F5 Big-ip Websafe>=12.0.0<=12.1.2
F5 Big-ip Websafe=11.2.1
F5 Big-ip Domain Name System>=11.5.1<=11.5.5
F5 Big-ip Domain Name System>=11.6.0<=11.6.1
F5 Big-ip Domain Name System>=12.0.0<=12.1.2
F5 Big-ip Domain Name System=11.2.1
Event History
Apr 13, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-6158?
CVE-2017-6158 is rated as a medium severity vulnerability.
2
How does CVE-2017-6158 affect F5 BIG-IP products?
CVE-2017-6158 affects various versions of F5 BIG-IP products by allowing improper handling of invalid IP addresses, which may lead to denial of service.
3
How do I fix CVE-2017-6158?
To fix CVE-2017-6158, upgrade to the latest available version of F5 BIG-IP software that addresses this vulnerability.
4
Which versions of F5 BIG-IP are vulnerable to CVE-2017-6158?
Affected versions include F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, and 11.2.1.
5
What type of vulnerability is CVE-2017-6158 classified as?
CVE-2017-6158 is classified as a denial of service vulnerability.