f5 big-ip-apm CVE-2017-6166 vulnerability in F5 Networks Products
Published on November 22, 2017

In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel (TMM) may crash when processing fragmented packets. This vulnerability affects TMM through a virtual server configured with a FastL4 profile. Traffic processing is disrupted while TMM restarts. If the affected BIG-IP system is configured as part of a device group, it will trigger a failover to the peer device.

NVD


Products Associated with CVE-2017-6166

Want to know whenever a new CVE is published for F5 Networks products? stack.watch will email you.

F5 Networks Big Ip Apm
 
F5 Networks Big Ip Analytics
 
F5 Networks Big Ip Pem
 
F5 Networks Big Ip Link Controller
 
F5 Networks Big Ip Ltm
 
F5 Networks Linerate
 
F5 Networks F5 Websafe
 
F5 Networks Big Ip Afm
 
F5 Networks Big Ip Application Acceleration Manager
 
F5 Networks Big Ip Dns
 
F5 Networks Big Ip Asm
 

Affected Versions

F5 Networks, Inc. BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe Version 12.0.0, 12.1.1 is affected by CVE-2017-6166

Exploit Probability

EPSS
1.20%
Percentile
78.76%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.