Tracker / CVE-2017-6161
CVE-2017-6161
Medium 5.3
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1, when ConfigSync is configured, attackers on adjacent networks may be able to bypass the TLS protections usually used to encrypted and authenticate connections to mcpd. This vulnerability may allow remote attackers to cause a denial-of-service (DoS) attack via resource exhaustion.
Affected products and versions
| f5 | big-ip_access_policy_manager |
|---|---|
| f5 | big-ip_access_policy_manager · 11.5.0 → 11.5.4 |
| f5 | big-ip_advanced_firewall_manager |
| f5 | big-ip_advanced_firewall_manager · 11.5.0 → 11.5.4 |
| f5 | big-ip_application_acceleration_manager |
| f5 | big-ip_application_acceleration_manager · 11.5.0 → 11.5.4 |
| f5 | big-ip_application_security_manager |
| f5 | big-ip_application_security_manager · 11.5.0 → 11.5.4 |
| f5 | big-ip_domain_name_system |
| f5 | big-ip_domain_name_system · 11.4.0 → 11.5.4 |
| f5 | big-ip_edge_gateway |
| f5 | big-ip_global_traffic_manager |
| f5 | big-ip_link_controller |
| f5 | big-ip_link_controller · 11.5.0 → 11.5.4 |
| f5 | big-ip_local_traffic_manager |
| f5 | big-ip_local_traffic_manager · 11.5.0 → 11.5.4 |
| f5 | big-ip_policy_enforcement_manager |
| f5 | big-ip_policy_enforcement_manager · 11.5.0 → 11.5.4 |
| f5 | big-ip_webaccelerator |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.