CVE-2017-6159: Medium severity F5 Big-ip Local Traffic Manager vulnerability

Published Oct 27, 2017

Updated

F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 are vulnerable to a denial of service attack when the MPTCP option is enabled on a virtual server. Data plane is vulnerable when using the MPTCP option of a TCP profile. There is no control plane exposure. An attacker may be able to disrupt services by causing TMM to restart hence temporarily failing to process traffic.

Affected Software

43 affected components

F5 Big-ip Local Traffic Manager=11.6.0

F5 Big-ip Local Traffic Manager=11.6.1

F5 Big-ip Local Traffic Manager=12.0.0

F5 Big-ip Local Traffic Manager=12.1.0

F5 Big-ip Local Traffic Manager=12.1.1

F5 Big-ip Local Traffic Manager=12.1.2

F5 Big-ip Application Acceleration Manager=11.6.0

F5 Big-ip Application Acceleration Manager=11.6.1

F5 Big-ip Application Acceleration Manager=12.0.0

F5 Big-ip Application Acceleration Manager=12.1.0

F5 Big-ip Application Acceleration Manager=12.1.1

F5 Big-ip Application Acceleration Manager=12.1.2

F5 BIG-IP Advanced Firewall Manager=11.6.0

F5 BIG-IP Advanced Firewall Manager=11.6.1

F5 BIG-IP Advanced Firewall Manager=12.0.0

F5 BIG-IP Advanced Firewall Manager=12.1.0

F5 BIG-IP Advanced Firewall Manager=12.1.1

F5 BIG-IP Advanced Firewall Manager=12.1.2

F5 BIG-IP Access Policy Manager=11.6.0

F5 BIG-IP Access Policy Manager=11.6.1

F5 BIG-IP Access Policy Manager=12.0.0

F5 BIG-IP Access Policy Manager=12.1.0

F5 BIG-IP Access Policy Manager=12.1.1

F5 BIG-IP Access Policy Manager=12.1.2

F5 BIG-IP Application Security Manager=11.6.0

F5 BIG-IP Application Security Manager=11.6.1

F5 BIG-IP Application Security Manager=12.0.0

F5 BIG-IP Application Security Manager=12.1.0

F5 BIG-IP Application Security Manager=12.1.1

F5 BIG-IP Application Security Manager=12.1.2

F5 Big-ip Link Controller=11.6.0

F5 Big-ip Link Controller=11.6.1

F5 Big-ip Link Controller=12.0.0

F5 Big-ip Link Controller=12.1.0

F5 Big-ip Link Controller=12.1.1

F5 Big-ip Link Controller=12.1.2

F5 Big-ip Policy Enforcement Manager=11.6.0

F5 Big-ip Policy Enforcement Manager=11.6.1

F5 Big-ip Policy Enforcement Manager=12.0.0

F5 Big-ip Policy Enforcement Manager=12.1.0

F5 Big-ip Policy Enforcement Manager=12.1.1

F5 Big-ip Policy Enforcement Manager=12.1.2

F5 Big-ip Websafe=1.0.0

Event History

Oct 27, 2017

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-6159?

CVE-2017-6159 has been classified as a denial-of-service vulnerability with potential significant impact.

How do I fix CVE-2017-6159?

To mitigate CVE-2017-6159, disable the MPTCP option on affected F5 BIG-IP products.

What versions are affected by CVE-2017-6159?

CVE-2017-6159 affects F5 BIG-IP versions 11.6.0 to 11.6.1 and 12.0.0 to 12.1.2.

Can CVE-2017-6159 be exploited remotely?

Yes, CVE-2017-6159 can be exploited remotely, making it a high-risk vulnerability.

What products are affected by CVE-2017-6159?

CVE-2017-6159 impacts multiple F5 products including BIG-IP LTM, AAM, AFM, APM, and others.