Details of VAR-201609-0589

ID

VAR-201609-0589

CVE

CVE-2016-6876

TITLE

plural F5 Product RESOLV::lookup iRule Service disruption in commands (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2016-004545

DESCRIPTION

The RESOLV::lookup iRule command in F5 BIG-IP LTM, APM, ASM, and Link Controller 10.2.1 through 10.2.4, 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.0.0 before HF3; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.0.0 before HF3; BIG-IP Analytics 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.0.0 before HF3; BIG-IP DNS 12.0.0 before HF3; BIG-IP Edge Gateway, WebAccelerator, and WOM 10.2.1 through 10.2.4 and 11.2.1; BIG-IP GTM 10.2.1 through 10.2.4, 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, and 11.6.x before 11.6.1; and BIG-IP PSM 10.2.1 through 10.2.4 and 11.4.0 through 11.4.1 allows remote DNS servers to cause a denial of service (CPU consumption or Traffic Management Microkernel crash) via a crafted PTR response. Multiple F5 BIG-IP Products are prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause a denial-of-service condition. F5 BIG-IP Analytics and others are products of F5 Corporation of the United States. F5 BIG-IP Analytics is a suite of web application performance analysis software. APM is a set of solutions that provide secure and unified access to business-critical applications and networks. LTM is a local traffic manager. The following products and versions are affected: F5 BIG-IP LTM, APM, ASM, Link Controller Versions 10.2.1 to 10.2.4, Versions 11.2.1, Versions 11.4.x, Versions 11.5.x prior to 11.5.4 HF2, 11.6 11.6.x prior to .1, 12.0.0 prior to HF3, BIG-IP AAM, AFM, PEM 11.4.x prior to 11.5.4 11.5.x prior to HF2, 11.6.x prior to 11.6.1 , 12.0.0 prior to HF3, BIG-IP Analytics 11.2.1, 11.4.x, 11.5.4 11.5.x prior to HF2, 11.6.x prior to 11.6.1, 12.0.0 prior to HF3 version, BIG-IP DNS HF3 prior to 12.0.0, BIG-IP Edge Gateway, WebAccelerator, WOM 10.2.1 to 10.2.4, 11.2.1, BIG-IP GTM 10.2.1 to 10.2.4, 11.2.1 releases, 11.4.x releases, 11.5.x releases prior to 11.5.4 HF2, 11.6.x releases prior to 11.6.1, BIG-IP PSM 10.2.1 to 10.2.4 releases, 11.4.0 to 11.4. 1 version

Trust: 1.98

sources: NVD: CVE-2016-6876 // JVNDB: JVNDB-2016-004545 // BID: 92800 // VULHUB: VHN-95696

AFFECTED PRODUCTS

vendor:	f5	model:	big-ip link controller	scope:	eq	version:	12.0.0	Trust: 2.4
vendor:	f5	model:	big-ip webaccelerator	scope:	eq	version:	11.2.1	Trust: 2.1
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.2.1	Trust: 2.1
vendor:	f5	model:	big-ip edge gateway	scope:	eq	version:	11.2.1	Trust: 2.1
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.2.1	Trust: 2.1
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.2.1	Trust: 1.8
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	12.0.0	Trust: 1.8
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	12.0.0	Trust: 1.8
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	12.0.0	Trust: 1.8
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	12.0.0	Trust: 1.8
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.2.1	Trust: 1.8
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	12.0.0	Trust: 1.8
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	12.0.0	Trust: 1.8
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.2.1	Trust: 1.8
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.2.1	Trust: 1.8
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	12.0.0	Trust: 1.8
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	12.0.0	Trust: 1.8
vendor:	f5	model:	big-ip wan optimization manager	scope:	eq	version:	11.2.1	Trust: 1.8
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.5.4	Trust: 1.6
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.5.3	Trust: 1.6
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.5.1	Trust: 1.6
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.6.0	Trust: 1.6
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.5.0	Trust: 1.6
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.5.0	Trust: 1.6
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.5.2	Trust: 1.6
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	10.2.4	Trust: 1.6
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.4.1	Trust: 1.6
vendor:	f5	model:	big-ip webaccelerator	scope:	eq	version:	10.2.4	Trust: 1.3
vendor:	f5	model:	big-ip webaccelerator	scope:	eq	version:	10.2.3	Trust: 1.3
vendor:	f5	model:	big-ip webaccelerator	scope:	eq	version:	10.2.2	Trust: 1.3
vendor:	f5	model:	big-ip webaccelerator	scope:	eq	version:	10.2.1	Trust: 1.3
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	10.2.4	Trust: 1.3
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	10.2.3	Trust: 1.3
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	10.2.2	Trust: 1.3
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	10.2.1	Trust: 1.3
vendor:	f5	model:	big-ip edge gateway	scope:	eq	version:	10.2.4	Trust: 1.3
vendor:	f5	model:	big-ip edge gateway	scope:	eq	version:	10.2.3	Trust: 1.3
vendor:	f5	model:	big-ip edge gateway	scope:	eq	version:	10.2.2	Trust: 1.3
vendor:	f5	model:	big-ip edge gateway	scope:	eq	version:	10.2.1	Trust: 1.3
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.6.0	Trust: 1.3
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	10.2.3	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	10.2.4	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.4.1	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.6.0	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	10.2.4	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.5.4	Trust: 1.0
vendor:	f5	model:	big-ip protocol security module	scope:	eq	version:	10.2.4	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	10.2.3	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.4.1	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	10.2.2	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.5.3	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.5.4	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.5.2	Trust: 1.0
vendor:	f5	model:	big-ip wan optimization manager	scope:	eq	version:	10.2.4	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip protocol security module	scope:	eq	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.6.0	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.5.2	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.5.4	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.5.3	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.4.1	Trust: 1.0
vendor:	f5	model:	big-ip wan optimization manager	scope:	eq	version:	10.2.3	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.6.0	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.6.0	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.4.1	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.6.0	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.5.2	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	10.2.2	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.4.1	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	10.2.1	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.5.2	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	10.2.2	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.5.2	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.5.4	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	10.2.3	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	10.2.1	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.5.0	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	10.2.1	Trust: 1.0
vendor:	f5	model:	big-ip protocol security module	scope:	eq	version:	10.2.1	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.6.0	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip wan optimization manager	scope:	eq	version:	10.2.2	Trust: 1.0
vendor:	f5	model:	big-ip wan optimization manager	scope:	eq	version:	10.2.1	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.6.0	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.5.0	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.4.1	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.5.2	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	10.2.3	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip protocol security module	scope:	eq	version:	10.2.3	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.5.0	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.5.4	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.5.2	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.5.0	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	10.2.1	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.5.3	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.5.3	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.5.4	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.4.1	Trust: 1.0
vendor:	f5	model:	big-ip protocol security module	scope:	eq	version:	11.4.1	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.5.4	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.5.3	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.5.0	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.5.2	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	10.2.2	Trust: 1.0
vendor:	f5	model:	big-ip protocol security module	scope:	eq	version:	10.2.2	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.5.4	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.5.3	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.5.0	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.5.3	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.4.0	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.5.0	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.5.3	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.5.1	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	10.2.4	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.4.1	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	10.2.1 to 10.2.4	Trust: 0.8
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.4.0 to 11.6.0	Trust: 0.8
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.4.0 to 11.6.0	Trust: 0.8
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.4.0 to 11.6.0	Trust: 0.8
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.4.0 to 11.6.0	Trust: 0.8
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	10.2.1 to 10.2.4	Trust: 0.8
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.4.0 to 11.6.0	Trust: 0.8
vendor:	f5	model:	big-ip edge gateway	scope:	eq	version:	10.2.1 to 10.2.4	Trust: 0.8
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	10.2.1 to 10.2.4	Trust: 0.8
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.4.0 to 11.6.0	Trust: 0.8
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	10.2.1 to 10.2.4	Trust: 0.8
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.4.0 to 11.6.0	Trust: 0.8
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	10.2.1 to 10.2.4	Trust: 0.8
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.4.0 to 11.6.0	Trust: 0.8
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.4.0 to 11.6.0	Trust: 0.8
vendor:	f5	model:	big-ip protocol security module	scope:	eq	version:	10.2.1 to 10.2.4	Trust: 0.8
vendor:	f5	model:	big-ip protocol security module	scope:	eq	version:	11.4.0 to 11.4.1	Trust: 0.8
vendor:	f5	model:	big-ip wan optimization manager	scope:	eq	version:	10.2.1 to 10.2.4	Trust: 0.8
vendor:	f5	model:	big-ip webaccelerator	scope:	eq	version:	10.2.1 to 10.2.4	Trust: 0.8
vendor:	f5	model:	big-ip wom hf15	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip wom	scope:	eq	version:	10.2.4	Trust: 0.3
vendor:	f5	model:	big-ip wom	scope:	eq	version:	10.2.3	Trust: 0.3
vendor:	f5	model:	big-ip wom	scope:	eq	version:	10.2.2	Trust: 0.3
vendor:	f5	model:	big-ip wom	scope:	eq	version:	10.2.1	Trust: 0.3
vendor:	f5	model:	big-ip wom	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip webaccelerator hf15	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip psm	scope:	eq	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip psm	scope:	eq	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip psm	scope:	eq	version:	10.2.4	Trust: 0.3
vendor:	f5	model:	big-ip psm	scope:	eq	version:	10.2.3	Trust: 0.3
vendor:	f5	model:	big-ip psm	scope:	eq	version:	10.2.2	Trust: 0.3
vendor:	f5	model:	big-ip psm	scope:	eq	version:	10.2.1	Trust: 0.3
vendor:	f5	model:	big-ip pem	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip pem	scope:	eq	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip pem	scope:	eq	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf1	scope:	eq	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	eq	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf15	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	eq	version:	10.2.4	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	eq	version:	10.2.3	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	eq	version:	10.2.2	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf1	scope:	eq	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	eq	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	eq	version:	10.2.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip gtm hf1	scope:	eq	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip gtm	scope:	eq	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip gtm hf15	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip gtm	scope:	eq	version:	10.2.4	Trust: 0.3
vendor:	f5	model:	big-ip gtm	scope:	eq	version:	10.2.3	Trust: 0.3
vendor:	f5	model:	big-ip gtm	scope:	eq	version:	10.2.2	Trust: 0.3
vendor:	f5	model:	big-ip gtm	scope:	eq	version:	10.2.1	Trust: 0.3
vendor:	f5	model:	big-ip gtm	scope:	eq	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip gtm	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip dns	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip asm hf1	scope:	eq	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	eq	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip asm hf15	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	eq	version:	10.2.4	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	eq	version:	10.2.3	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	eq	version:	10.2.2	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	eq	version:	10.2.1	Trust: 0.3
vendor:	f5	model:	big-ip asm hf1	scope:	eq	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	eq	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip apm hf1	scope:	eq	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	eq	version:	10.2.4	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	eq	version:	10.2.3	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	eq	version:	10.2.2	Trust: 0.3
vendor:	f5	model:	big-ip apm hf1	scope:	eq	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	eq	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	eq	version:	11.4.0	Trust: 0.3
vendor:	f5	model:	big-ip apm hf5	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	eq	version:	10.2.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf1	scope:	eq	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf15	scope:	eq	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf1	scope:	eq	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip afm hf1	scope:	eq	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	eq	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip afm hf1	scope:	eq	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	eq	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	eq	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip aam hf1	scope:	eq	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip aam hf1	scope:	eq	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	eq	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	eq	version:	11.4.0	Trust: 0.3
vendor:	f5	model:	big-ip pem hf2	scope:	ne	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip pem	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip pem hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip pem	scope:	ne	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf16	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	ne	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf2	scope:	ne	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf2	scope:	ne	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf16	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	ne	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip gtm	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip gtm hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip gtm hf16	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip edge gateway hf16	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip dns hf2	scope:	ne	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip dns	scope:	ne	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip asm hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip asm hf16	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	ne	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip asm hf2	scope:	ne	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip apm hf2	scope:	ne	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip apm hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip apm hf16	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	ne	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf16	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	ne	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf2	scope:	ne	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip afm hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	ne	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip afm hf2	scope:	ne	version:	12.0.0	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip aam hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	ne	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip aam hf2	scope:	ne	version:	12.0.0	Trust: 0.3

sources: BID: 92800 // JVNDB: JVNDB-2016-004545 // CNNVD: CNNVD-201609-054 // NVD: CVE-2016-6876

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2016-6876
value:	HIGH
Trust: 1.0
NVD:	CVE-2016-6876
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201609-054
value:	HIGH
Trust: 0.6
VULHUB:	VHN-95696
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2016-6876
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-95696
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2016-6876
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	3.6
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-95696 // JVNDB: JVNDB-2016-004545 // CNNVD: CNNVD-201609-054 // NVD: CVE-2016-6876

PROBLEMTYPE DATA

problemtype:

CWE-399

Trust: 1.9

sources: VULHUB: VHN-95696 // JVNDB: JVNDB-2016-004545 // NVD: CVE-2016-6876

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201609-054

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201609-054

CONFIGURATIONS

sources: JVNDB: JVNDB-2016-004545

PATCH

title:	SOL52638558: RESOLV::lookup iRule command vulnerability CVE-2016-6876	url:	https://support.f5.com/kb/en-us/solutions/public/k/52/sol52638558.html	Trust: 0.8
title:	Multiple F5 Product denial of service vulnerability fixes	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=63883	Trust: 0.6

sources: JVNDB: JVNDB-2016-004545 // CNNVD: CNNVD-201609-054

EXTERNAL IDS

db:	NVD	id:	CVE-2016-6876	Trust: 2.8
db:	SECTRACK	id:	1036725	Trust: 1.7
db:	JVNDB	id:	JVNDB-2016-004545	Trust: 0.8
db:	CNNVD	id:	CNNVD-201609-054	Trust: 0.7
db:	BID	id:	92800	Trust: 0.4
db:	VULHUB	id:	VHN-95696	Trust: 0.1

sources: VULHUB: VHN-95696 // BID: 92800 // JVNDB: JVNDB-2016-004545 // CNNVD: CNNVD-201609-054 // NVD: CVE-2016-6876

REFERENCES

url:	https://support.f5.com/kb/en-us/solutions/public/k/52/sol52638558.html	Trust: 2.0
url:	http://www.securitytracker.com/id/1036725	Trust: 1.7
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-6876	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-6876	Trust: 0.8
url:	http://www.f5.com/products/big-ip/	Trust: 0.3

sources: VULHUB: VHN-95696 // BID: 92800 // JVNDB: JVNDB-2016-004545 // CNNVD: CNNVD-201609-054 // NVD: CVE-2016-6876

CREDITS

The vendor reported this issue.

Trust: 0.3

sources: BID: 92800

SOURCES

db:	VULHUB	id:	VHN-95696
db:	BID	id:	92800
db:	JVNDB	id:	JVNDB-2016-004545
db:	CNNVD	id:	CNNVD-201609-054
db:	NVD	id:	CVE-2016-6876

LAST UPDATE DATE

2024-11-23T22:01:23.677000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-95696	date:	2019-06-06T00:00:00
db:	BID	id:	92800	date:	2016-08-30T00:00:00
db:	JVNDB	id:	JVNDB-2016-004545	date:	2016-09-09T00:00:00
db:	CNNVD	id:	CNNVD-201609-054	date:	2019-06-10T00:00:00
db:	NVD	id:	CVE-2016-6876	date:	2024-11-21T02:57:00.097

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-95696	date:	2016-09-07T00:00:00
db:	BID	id:	92800	date:	2016-08-30T00:00:00
db:	JVNDB	id:	JVNDB-2016-004545	date:	2016-09-09T00:00:00
db:	CNNVD	id:	CNNVD-201609-054	date:	2016-08-31T00:00:00
db:	NVD	id:	CVE-2016-6876	date:	2016-09-07T19:28:17.927