CVE-2017-6150
Under certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles, when the Reassemble IP Fragments option is disabled (default), some specific large fragmented packets may restart the Traffic Management Microkernel (TMM).
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.74%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Under certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles, when the Reassemble IP Fragments option is disabled (default), some specific large fragmented packets may restart the Traffic Management Microkernel (TMM).
- CVSS 3.0
- 7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 1.74% probability · 76th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- f5/big-ip local traffic manager · f5/big-ip application acceleration manager · f5/big-ip advanced firewall manager · f5/big-ip analytics · f5/big-ip access policy manager · f5/big-ip application security manager · f5/big-ip dns · f5/big-ip link controller · f5/big-ip policy enforcement manager · f5/big-ip websafe
- Source
- f5sirt@f5.com
References
- http://www.securityfocus.com/bid/103235Third Party Advisory, VDB Entry
- https://support.f5.com/csp/article/K62712037Vendor Advisory
- http://www.securityfocus.com/bid/103235Third Party Advisory, VDB Entry
- https://support.f5.com/csp/article/K62712037Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.