Multiple F5 BIG-IP Products CVE-2017-6166 Remote Denial of Service Vulnerability

Bugtraq ID:	102264
Class:	Boundary Condition Error
CVE:	CVE-2017-6166
Remote:	Yes
Local:	No
Published:	Dec 22 2017 12:00AM
Updated:	Dec 22 2017 12:00AM
Credit:	The vendor reported the issue.
Vulnerable:	F5 BIG-IP WebSafe 12.1.1 F5 BIG-IP WebSafe 12.1 HF2 F5 BIG-IP WebSafe 12.1 HF1 F5 BIG-IP WebSafe 12.1 F5 BIG-IP WebSafe 12.0 HF4 F5 BIG-IP WebSafe 12.0 HF3 F5 BIG-IP WebSafe 12.0 HF2 F5 BIG-IP WebSafe 12.0 HF1 F5 BIG-IP WebSafe 12.0 F5 BIG-IP PEM 12.1.1 F5 BIG-IP PEM 12.1 HF2 F5 BIG-IP PEM 12.1 HF1 F5 BIG-IP PEM 12.0 HF4 F5 BIG-IP PEM 12.0 HF3 F5 BIG-IP PEM 12.0 HF2 F5 BIG-IP PEM 12.0 F5 BIG-IP PEM 12.1.0 F5 BIG-IP PEM 12.0.0 HF1 F5 BIG-IP LTM 12.1.1 F5 BIG-IP LTM 12.1 HF2 F5 BIG-IP LTM 12.1 HF1 F5 BIG-IP LTM 12.0 F5 BIG-IP LTM 12.1.0 F5 BIG-IP Link Controller 12.1.1 F5 BIG-IP Link Controller 12.1 HF2 F5 BIG-IP Link Controller 12.1 HF1 F5 BIG-IP Link Controller 12.0 HF4 F5 BIG-IP Link Controller 12.0 HF3 F5 BIG-IP Link Controller 12.0 HF2 F5 BIG-IP Link Controller 12.0 build 1.14.628 F5 BIG-IP Link Controller 12.0 F5 BIG-IP Link Controller 12.1.0 F5 BIG-IP Link Controller 12.0.0 HF1 F5 BIG-IP DNS 12.1.1 F5 BIG-IP DNS 12.0 HF3 F5 BIG-IP DNS 12.0 HF2 F5 BIG-IP DNS 12.0 build 1.14.628 F5 BIG-IP DNS 12.0 F5 BIG-IP DNS 12.1.0 F5 BIG-IP DNS 12.0.0 HF1 F5 BIG-IP ASM 12.1.1 F5 BIG-IP ASM 12.1 HF2 F5 BIG-IP ASM 12.1 HF1 F5 BIG-IP ASM 12.0 HF4 F5 BIG-IP ASM 12.0 build 1.14.628 F5 BIG-IP ASM 12.0 F5 BIG-IP ASM 12.1.0 F5 BIG-IP ASM 12.0.0 HF3 F5 BIG-IP ASM 12.0.0 HF2 F5 BIG-IP ASM 12.0.0 HF1 F5 BIG-IP APM 12.1.1 F5 BIG-IP APM 12.1 HF2 F5 BIG-IP APM 12.1 HF1 F5 BIG-IP APM 12.0 HF4 F5 BIG-IP APM 12.0 HF3 F5 BIG-IP APM 12.0 HF2 F5 BIG-IP APM 12.0 build 1.14.628 F5 BIG-IP APM 12.0 F5 BIG-IP APM 12.1.0 F5 BIG-IP APM 12.0.0 HF1 F5 BIG-IP Analytics 12.1.1 F5 BIG-IP Analytics 12.0 build 1.14.628 F5 BIG-IP Analytics 12.0 F5 BIG-IP Analytics 12.1.0 F5 BIG-IP Analytics 12.0.0 HF3 F5 BIG-IP Analytics 12.0.0 HF2 F5 BIG-IP Analytics 12.0.0 HF1 F5 BIG-IP AFM 12.1.1 F5 BIG-IP AFM 12.1 HF2 F5 BIG-IP AFM 12.1 HF1 F5 BIG-IP AFM 12.0 HF4 F5 BIG-IP AFM 12.0 build 1.14.628 F5 BIG-IP AFM 12.0 F5 BIG-IP AFM 12.1.0 F5 BIG-IP AFM 12.0.0 HF3 F5 BIG-IP AFM 12.0.0 HF2 F5 BIG-IP AFM 12.0.0 HF1 F5 BIG-IP AAM 12.1.1 F5 BIG-IP AAM 12.1 HF2 F5 BIG-IP AAM 12.1 HF1 F5 BIG-IP AAM 12.0 HF4 F5 BIG-IP AAM 12.0 F5 BIG-IP AAM 12.1.0 F5 BIG-IP AAM 12.0.0 HF3 F5 BIG-IP AAM 12.0.0 HF2 F5 BIG-IP AAM 12.0.0 HF1
Not Vulnerable:	F5 BIG-IP WebSafe 12.1.2 F5 BIG-IP PEM 12.1.2 F5 BIG-IP LTM 12.1.2 F5 BIG-IP Link Controller 12.1.2 F5 BIG-IP DNS 12.1.2 F5 BIG-IP ASM 12.1.2 F5 BIG-IP APM 12.1.2 F5 BIG-IP Analytics 12.1.2 F5 BIG-IP AFM 12.1.2 F5 BIG-IP AAM 12.1.2

Multiple F5 BIG-IP Products CVE-2017-6166 Remote Denial of Service Vulnerability

Multiple F5 BIG-IP Products is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to crash the application resulting in denial-of-service conditions.

Multiple F5 BIG-IP Products CVE-2017-6166 Remote Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple F5 BIG-IP Products CVE-2017-6166 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple F5 BIG-IP Products CVE-2017-6166 Remote Denial of Service Vulnerability

References:

• F5 BIG-IP Homepage (F5)
  
• K65615624: BIG-IP FastL4 TMM vulnerability CVE-2017-6166 (F5)