CVE-2017-6161
Summary
| CVE | CVE-2017-6161 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-10-27 14:29:00 UTC |
| Updated | 2017-11-16 19:31:00 UTC |
| Description | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1, when ConfigSync is configured, attackers on adjacent networks may be able to bypass the TLS protections usually used to encrypted and authenticate connections to mcpd. This vulnerability may allow remote attackers to cause a denial-of-service (DoS) attack via resource exhaustion. |
Risk And Classification
Problem Types: CWE-400
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | F5 | Big-ip Access Policy Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Access Policy Manager | All | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Advanced Firewall Manager | All | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Application Acceleration Manager | All | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Application Security Manager | All | All | All | All |
| Application | F5 | Big-ip Domain Name System | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Domain Name System | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Domain Name System | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Domain Name System | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Domain Name System | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Domain Name System | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Domain Name System | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Domain Name System | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Domain Name System | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Domain Name System | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Domain Name System | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Domain Name System | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Domain Name System | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Domain Name System | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Domain Name System | All | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.5.2 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.5.3 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.5.4 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.5.5 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.5.2 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.5.3 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.5.4 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.5.5 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Edge Gateway | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.5.2 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.5.3 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.5.4 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.5.2 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.5.3 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.5.4 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Global Traffic Manager | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Link Controller | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Link Controller | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Link Controller | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Link Controller | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Link Controller | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Link Controller | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Link Controller | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Link Controller | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Link Controller | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Link Controller | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Link Controller | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Link Controller | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Link Controller | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Link Controller | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Link Controller | All | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Local Traffic Manager | All | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Policy Enforcement Manager | All | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.5.2 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.5.3 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.5.4 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.5.5 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.6.2 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 12.1.2 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.2.1 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.4.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.4.1 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.5.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.5.1 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.5.2 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.5.3 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.5.4 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.5.5 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.6.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.6.1 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 11.6.2 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 12.0.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 12.1.0 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 12.1.1 | All | All | All |
| Application | F5 | Big-ip Webaccelerator | 12.1.2 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| F5 BIG-IP MCPD TLS Bypass Lets Remote Users Deny Service - SecurityTracker | SECTRACK | www.securitytracker.com | Third Party Advisory, VDB Entry |
| support.f5.com/csp/article/K62279530 | CONFIRM | support.f5.com | Vendor Advisory |
| F5 Enterprise Manager MCPD TLS Bypass Lets Remote Users Deny Service - SecurityTracker | SECTRACK | www.securitytracker.com | Third Party Advisory, VDB Entry |
| Multiple F5 BIG-IP Products CVE-2017-6161 Security Bypass Vulnerability | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.