Skip to content
OpenAdvisories
Unscored CVE-2017-6159 EUVD-2017-15224GHSA-4pmg-6wm7-72gm

F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 a…

Published Oct 27, 2017 · Updated Sep 17, 2024 · Assigned by f5

Vendor: F5 Product: BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, WebSafe Category: Network devices

Description

F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 are vulnerable to a denial of service attack when the MPTCP option is enabled on a virtual server. Data plane is vulnerable when using the MPTCP option of a TCP profile. There is no control plane exposure. An attacker may be able to disrupt services by causing TMM to restart hence temporarily failing to process traffic.

Affected products

VendorProductAffectedFixed
F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe 12.0.0 - 12.1.2, 11.6.0 &#xe2, &#x80, " 11.6.1 —

References