Multiple F5 BIG-IP Products CVE-2017-6163 Denial of Service Vulnerability

Bugtraq ID:	101606
Class:	Design Error
CVE:	CVE-2017-6163
Remote:	Yes
Local:	No
Published:	Oct 26 2017 12:00AM
Updated:	Dec 19 2017 09:00PM
Credit:	The vendor reported this issue.
Vulnerable:	F5 BIG-IP PSM 11.4.1 F5 BIG-IP PSM 11.4 HF9 F5 BIG-IP PSM 11.4 HF8 F5 BIG-IP PSM 11.4 HF2 F5 BIG-IP PSM 11.4 HF10 F5 BIG-IP PSM 11.4 F5 BIG-IP PEM 12.1.2 F5 BIG-IP PEM 12.0 HF4 F5 BIG-IP PEM 12.0 HF3 F5 BIG-IP PEM 12.0 HF2 F5 BIG-IP PEM 12.0 F5 BIG-IP PEM 11.6.1 F5 BIG-IP PEM 11.6 HF8 F5 BIG-IP PEM 11.6 HF6 F5 BIG-IP PEM 11.5.4 HF3 F5 BIG-IP PEM 11.5.4 HF2 F5 BIG-IP PEM 11.5.4 HF1 F5 BIG-IP PEM 11.5.3 HF2 F5 BIG-IP PEM 11.5.3 F5 BIG-IP PEM 11.5.1 HF11 F5 BIG-IP PEM 11.5.1 HF10 F5 BIG-IP PEM 11.5.1 F5 BIG-IP PEM 11.5 F5 BIG-IP PEM 11.4 HF2 F5 BIG-IP PEM 11.4 F5 BIG-IP PEM 12.0.0 HF1 F5 BIG-IP PEM 11.6.0 HF5 F5 BIG-IP PEM 11.6.0 HF4 F5 BIG-IP PEM 11.6.0 F5 BIG-IP PEM 11.5.4 F5 BIG-IP PEM 11.5.3 HF1 F5 BIG-IP PEM 11.5.1 HF6 F5 BIG-IP LTM 12.1.2 F5 BIG-IP LTM 12.0 HF4 F5 BIG-IP LTM 12.0 F5 BIG-IP LTM 11.6.1 F5 BIG-IP LTM 11.6 HF8 F5 BIG-IP LTM 11.6 HF7 F5 BIG-IP LTM 11.6 HF6 F5 BIG-IP LTM 11.5.4 HF3 F5 BIG-IP LTM 11.5.4 HF2 F5 BIG-IP LTM 11.5.4 HF1 F5 BIG-IP LTM 11.5.3 HF2 F5 BIG-IP LTM 11.5.3 F5 BIG-IP LTM 11.5.2 F5 BIG-IP LTM 11.5.1 HF6 F5 BIG-IP LTM 11.5.1 HF5 F5 BIG-IP LTM 11.5.1 HF11 F5 BIG-IP LTM 11.5.1 HF10 F5 BIG-IP LTM 11.5.1 F5 BIG-IP LTM 11.5 F5 BIG-IP LTM 11.4.1 HF9 F5 BIG-IP LTM 11.4.1 HF6 F5 BIG-IP LTM 11.4.1 HF5 F5 BIG-IP LTM 11.4.1 HF4 F5 BIG-IP LTM 11.4.1 HF3 F5 BIG-IP LTM 11.4.1 HF2 F5 BIG-IP LTM 11.4.1 HF1 F5 BIG-IP LTM 11.4 HF9 F5 BIG-IP LTM 11.4 HF8 F5 BIG-IP LTM 11.4 HF7 F5 BIG-IP LTM 11.4 HF2 F5 BIG-IP LTM 11.4 HF10 F5 BIG-IP LTM 11.4 F5 BIG-IP LTM 12.0.0 HF3 F5 BIG-IP LTM 12.0.0 HF2 F5 BIG-IP LTM 12.0.0 HF1 F5 BIG-IP LTM 11.6.0 HF5 F5 BIG-IP LTM 11.6.0 HF4 F5 BIG-IP LTM 11.6.0 F5 BIG-IP LTM 11.5.4 F5 BIG-IP LTM 11.5.3 HF1 F5 BIG-IP LTM 11.4.1 HF8 F5 BIG-IP LTM 11.4.1 HF11 F5 BIG-IP LTM 11.4.1 HF10 F5 BIG-IP LTM 11.4.1 F5 BIG-IP Link Controller 12.1.2 F5 BIG-IP Link Controller 12.0 HF4 F5 BIG-IP Link Controller 12.0 HF3 F5 BIG-IP Link Controller 12.0 HF2 F5 BIG-IP Link Controller 12.0 F5 BIG-IP Link Controller 11.6.1 HF2 F5 BIG-IP Link Controller 11.6.1 HF1 F5 BIG-IP Link Controller 11.6 HF8 F5 BIG-IP Link Controller 11.6 HF6 F5 BIG-IP Link Controller 11.6 HF4 F5 BIG-IP Link Controller 11.6 F5 BIG-IP Link Controller 11.5.4 HF3 F5 BIG-IP Link Controller 11.5.4 HF2 F5 BIG-IP Link Controller 11.5.4 HF1 F5 BIG-IP Link Controller 11.5.3 HF2 F5 BIG-IP Link Controller 11.5.3 F5 BIG-IP Link Controller 11.5.2 F5 BIG-IP Link Controller 11.5.1 HF8 F5 BIG-IP Link Controller 11.5.1 HF11 F5 BIG-IP Link Controller 11.5.1 HF10 F5 BIG-IP Link Controller 11.5.1 F5 BIG-IP Link Controller 11.5 HF7 F5 BIG-IP Link Controller 11.5 F5 BIG-IP Link Controller 11.4 HF9 F5 BIG-IP Link Controller 11.4 HF8 F5 BIG-IP Link Controller 11.4 HF2 F5 BIG-IP Link Controller 11.4 HF10 F5 BIG-IP Link Controller 11.4 F5 BIG-IP Link Controller 12.0.0 HF1 F5 BIG-IP Link Controller 11.6.1 F5 BIG-IP Link Controller 11.6.0 HF5 F5 BIG-IP Link Controller 11.5.4 F5 BIG-IP Link Controller 11.5.3 HF1 F5 BIG-IP ASM 12.1.2 F5 BIG-IP ASM 12.0 HF4 F5 BIG-IP ASM 12.0 F5 BIG-IP ASM 11.6.1 HF2 F5 BIG-IP ASM 11.6.1 HF1 F5 BIG-IP ASM 11.6.1 F5 BIG-IP ASM 11.6 HF8 F5 BIG-IP ASM 11.6 HF7 F5 BIG-IP ASM 11.6 HF6 F5 BIG-IP ASM 11.5.4 HF3 F5 BIG-IP ASM 11.5.4 HF2 F5 BIG-IP ASM 11.5.4 HF1 F5 BIG-IP ASM 11.5.3 HF2 F5 BIG-IP ASM 11.5.3 F5 BIG-IP ASM 11.5.2 F5 BIG-IP ASM 11.5.1 HF6 F5 BIG-IP ASM 11.5.1 HF11 F5 BIG-IP ASM 11.5.1 HF10 F5 BIG-IP ASM 11.5.1 F5 BIG-IP ASM 11.5 F5 BIG-IP ASM 11.4 HF9 F5 BIG-IP ASM 11.4 HF8 F5 BIG-IP ASM 11.4 HF2 F5 BIG-IP ASM 11.4 HF10 F5 BIG-IP ASM 11.4 F5 BIG-IP ASM 12.0.0 HF3 F5 BIG-IP ASM 12.0.0 HF2 F5 BIG-IP ASM 12.0.0 HF1 F5 BIG-IP ASM 11.6.0 HF5 F5 BIG-IP ASM 11.6.0 HF4 F5 BIG-IP ASM 11.6.0 F5 BIG-IP ASM 11.5.4 F5 BIG-IP ASM 11.5.3 HF1 F5 BIG-IP APM 12.1.2 F5 BIG-IP APM 12.0 HF4 F5 BIG-IP APM 12.0 HF3 F5 BIG-IP APM 12.0 HF2 F5 BIG-IP APM 12.0 F5 BIG-IP APM 11.6.1 HF2 F5 BIG-IP APM 11.6.1 HF1 F5 BIG-IP APM 11.6.1 F5 BIG-IP APM 11.6 HF8 F5 BIG-IP APM 11.6 HF7 F5 BIG-IP APM 11.6 HF6 F5 BIG-IP APM 11.6 HF5 F5 BIG-IP APM 11.6 HF4 F5 BIG-IP APM 11.6 HF3 F5 BIG-IP APM 11.5.4 HF3 F5 BIG-IP APM 11.5.4 HF2 F5 BIG-IP APM 11.5.4 HF1 F5 BIG-IP APM 11.5.3 HF2 F5 BIG-IP APM 11.5.3 F5 BIG-IP APM 11.5.2 HF1 F5 BIG-IP APM 11.5.2 F5 BIG-IP APM 11.5.1 HF11 F5 BIG-IP APM 11.5.1 HF10 F5 BIG-IP APM 11.5.1 F5 BIG-IP APM 11.4 HF9 F5 BIG-IP APM 11.4 HF8 F5 BIG-IP APM 11.4 HF2 F5 BIG-IP APM 11.4 HF10 F5 BIG-IP APM 12.0.0 HF1 F5 BIG-IP APM 11.6.0 F5 BIG-IP APM 11.5.4 F5 BIG-IP APM 11.5.3 HF1 F5 BIG-IP APM 11.5.1 HF6 F5 BIG-IP APM 11.5.0 F5 BIG-IP APM 11.4.0 F5 BIG-IP AFM 12.1.2 F5 BIG-IP AFM 12.1.1 F5 BIG-IP AFM 12.1 HF2 F5 BIG-IP AFM 12.1 HF1 F5 BIG-IP AFM 12.0 HF4 F5 BIG-IP AFM 12.0 F5 BIG-IP AFM 11.6.1 F5 BIG-IP AFM 11.6 HF8 F5 BIG-IP AFM 11.6 HF7 F5 BIG-IP AFM 11.6 HF6 F5 BIG-IP AFM 11.5.4 HF3 F5 BIG-IP AFM 11.5.4 HF2 F5 BIG-IP AFM 11.5.4 HF1 F5 BIG-IP AFM 11.5.3 HF2 F5 BIG-IP AFM 11.5.3 F5 BIG-IP AFM 11.5.2 F5 BIG-IP AFM 11.5.1 HF11 F5 BIG-IP AFM 11.5.1 HF10 F5 BIG-IP AFM 11.5.1 F5 BIG-IP AFM 11.5 F5 BIG-IP AFM 11.4.1 HF6 F5 BIG-IP AFM 11.4.1 HF5 F5 BIG-IP AFM 11.4.1 HF4 F5 BIG-IP AFM 11.4.1 HF3 F5 BIG-IP AFM 11.4.1 HF2 F5 BIG-IP AFM 11.4.1 HF1 F5 BIG-IP AFM 11.4 HF9 F5 BIG-IP AFM 11.4 HF8 F5 BIG-IP AFM 11.4 HF2 F5 BIG-IP AFM 11.4 HF10 F5 BIG-IP AFM 11.4 F5 BIG-IP AFM 12.1.0 F5 BIG-IP AFM 12.0.0 HF3 F5 BIG-IP AFM 12.0.0 HF2 F5 BIG-IP AFM 12.0.0 HF1 F5 BIG-IP AFM 11.6.0 HF5 F5 BIG-IP AFM 11.6.0 HF4 F5 BIG-IP AFM 11.6.0 F5 BIG-IP AFM 11.5.4 F5 BIG-IP AFM 11.5.3 HF1 F5 BIG-IP AFM 11.5.1 HF6 F5 BIG-IP AFM 11.4.1 HF9 F5 BIG-IP AFM 11.4.1 HF8 F5 BIG-IP AFM 11.4.1 HF10 F5 BIG-IP AFM 11.4.1 F5 BIG-IP AAM 12.1.2 F5 BIG-IP AAM 12.1.1 F5 BIG-IP AAM 12.1 HF2 F5 BIG-IP AAM 12.1 HF1 F5 BIG-IP AAM 12.0 HF4 F5 BIG-IP AAM 12.0 F5 BIG-IP AAM 11.6.1 HF2 F5 BIG-IP AAM 11.6.1 HF1 F5 BIG-IP AAM 11.6.1 F5 BIG-IP AAM 11.6 HF8 F5 BIG-IP AAM 11.6 HF7 F5 BIG-IP AAM 11.6 HF6 F5 BIG-IP AAM 11.5.3 HF2 F5 BIG-IP AAM 11.5.3 F5 BIG-IP AAM 11.5.2 F5 BIG-IP AAM 11.5.1 HF6 F5 BIG-IP AAM 11.5.1 HF11 F5 BIG-IP AAM 11.5.1 HF10 F5 BIG-IP AAM 11.5.1 F5 BIG-IP AAM 11.5 F5 BIG-IP AAM 11.4 HF9 F5 BIG-IP AAM 11.4 HF8 F5 BIG-IP AAM 11.4 HF2 F5 BIG-IP AAM 11.4 HF10 F5 BIG-IP AAM 12.1.0 F5 BIG-IP AAM 12.0.0 HF3 F5 BIG-IP AAM 12.0.0 HF2 F5 BIG-IP AAM 12.0.0 HF1 F5 BIG-IP AAM 11.6.0 HF5 F5 BIG-IP AAM 11.6.0 HF4 F5 BIG-IP AAM 11.6.0 F5 BIG-IP AAM 11.5.4 F5 BIG-IP AAM 11.5.3 HF1 F5 BIG-IP AAM 11.4.0
Not Vulnerable:	F5 BIG-IP PEM 12.1.2 HF1 F5 BIG-IP PEM 11.6.2 F5 BIG-IP PEM 11.5.5 F5 BIG-IP LTM 12.1.2 HF1 F5 BIG-IP LTM 11.6.2 F5 BIG-IP LTM 11.5.5 F5 BIG-IP LTM 11.2.1 F5 BIG-IP Link Controller 12.1.2 HF1 F5 BIG-IP Link Controller 11.2.1 F5 BIG-IP Link Controller 11.6.2 F5 BIG-IP Link Controller 11.5.5 F5 BIG-IP ASM 12.1.2 HF1 F5 BIG-IP ASM 11.6.2 F5 BIG-IP ASM 11.5.5 F5 BIG-IP ASM 11.2.1 F5 BIG-IP APM 12.1.2 HF1 F5 BIG-IP APM 11.6.2 F5 BIG-IP APM 11.5.5 F5 BIG-IP APM 11.2.1 F5 BIG-IP AFM 12.1.2 HF1 F5 BIG-IP AFM 11.6.2 F5 BIG-IP AFM 11.5.5 F5 BIG-IP AAM 12.1.2 HF1 F5 BIG-IP AAM 11.6.2 F5 BIG-IP AAM 11.5.5

Multiple F5 BIG-IP Products CVE-2017-6163 Denial of Service Vulnerability

Multiple F5 BIG-IP products are prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause a denial-of-service condition.

Multiple F5 BIG-IP Products CVE-2017-6163 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple F5 BIG-IP Products CVE-2017-6163 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple F5 BIG-IP Products CVE-2017-6163 Denial of Service Vulnerability

References:

• F5 BIG-IP Homepage (F5)
  
• K22541983: BIG-IP virtual servers with Client SSL and HTTP/2 or SPDY configured (F5 Networks)