Skip to content
OpenAdvisories
Unscored CVE-2017-6129 EUVD-2017-15194GHSA-xg29-xvm5-p526

In F5 BIG-IP APM software version 13.0.0 and 12.1.2, in some circumstances, APM tunneled VPN flows can cause a VPN/PPP connflow to be prema…

Published Dec 21, 2017 · Updated Sep 16, 2024 · Assigned by f5

Description

In F5 BIG-IP APM software version 13.0.0 and 12.1.2, in some circumstances, APM tunneled VPN flows can cause a VPN/PPP connflow to be prematurely freed or cause TMM to stop responding with a "flow not in use" assertion. An attacker may be able to disrupt traffic or cause the BIG-IP system to fail over to another device in the device group.

Affected products

VendorProductAffectedFixed
F5 Networks BIG-IP APM 13.0.0, 12.1.2 —

References