Sign-up

ID

VAR-201701-0863


CVE

CVE-2016-9247


TITLE

BIG-IP In the virtual server of the system Traffic Management Microkernel Restarted vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2016-006700

DESCRIPTION

Under certain conditions for BIG-IP systems using a virtual server with an associated FastL4 profile and TCP analytics profile, a specific sequence of packets may cause the Traffic Management Microkernel (TMM) to restart. Multiple F5 BIG-IP products are prone to a denial-of-service vulnerability. An attacker can exploit this issue to disrupt traffic or cause the BIG-IP system to fail over to another device in the device group. F5 BIG-IP and so on are all products of F5 Company in the United States. F5 BIG-IP Analytics is a suite of web application performance analysis software. APM is a set of solutions that provide secure and unified access to business-critical applications and networks. The following devices and versions are affected: F5 BIG-IP Version 12.1.0 through 12.1.1; BIG-IP AAM Version 12.1.0 through 12.1.1; BIG-IP AFM Version 12.1.0 through 12.1.1; BIG -IP Analytics 12.1.0 to 12.1.1; BIG-IP APM 12.1.0 to 12.1.1; BIG-IP ASM 12.1.0 to 12.1.1; BIG-IP DNS LTMUnder 12.1.0 to version 12.1.1; BIG-IP Link Controller version 12.1.0 to version 12.1.1; BIG-IP PEM version 12.1.0 to version 12.1.1; BIG-IP WebSafe version 12.1.0 to version 12.1.1

Trust: 1.98

sources: NVD: CVE-2016-9247 // JVNDB: JVNDB-2016-006700 // BID: 95405 // VULHUB: VHN-98067

AFFECTED PRODUCTS

vendor:f5model:big-ip websafescope:eqversion:12.1.1

Trust: 1.9

vendor:f5model:big-ip analyticsscope:eqversion:12.1.1

Trust: 1.9

vendor:f5model:big-ip analyticsscope:eqversion:12.1.0

Trust: 1.9

vendor:f5model:big-ip access policy managerscope:eqversion:12.1.0

Trust: 1.6

vendor:f5model:big-ip application acceleration managerscope:eqversion:12.1.1

Trust: 1.6

vendor:f5model:big-ip advanced firewall managerscope:eqversion:12.1.0

Trust: 1.6

vendor:f5model:big-ip policy enforcement managerscope:eqversion:12.1.1

Trust: 1.6

vendor:f5model:big-ip local traffic managerscope:eqversion:12.1.1

Trust: 1.6

vendor:f5model:big-ip application acceleration managerscope:eqversion:12.1.0

Trust: 1.6

vendor:f5model:big-ip advanced firewall managerscope:eqversion:12.1.1

Trust: 1.6

vendor:f5model:big-ip link controllerscope:eqversion:12.1.1

Trust: 1.3

vendor:f5model:big-ip link controllerscope:eqversion:12.1.0

Trust: 1.3

vendor:f5model:big-ip access policy managerscope:eqversion:12.1.1

Trust: 1.0

vendor:f5model:big-ip local traffic managerscope:eqversion:12.1.0

Trust: 1.0

vendor:f5model:big-ip application security managerscope:eqversion:12.1.1

Trust: 1.0

vendor:f5model:big-ip policy enforcement managerscope:eqversion:12.1.0

Trust: 1.0

vendor:f5model:big-ip domain name systemscope:eqversion:12.1.1

Trust: 1.0

vendor:f5model:big-ip application security managerscope:eqversion:12.1.0

Trust: 1.0

vendor:f5model:big-ip domain name systemscope:eqversion:12.1.0

Trust: 1.0

vendor:f5model:big-ip websafescope:eqversion:12.1.0

Trust: 1.0

vendor:f5model:big-ip access policy managerscope:eqversion:12.1.0 to 12.1.1

Trust: 0.8

vendor:f5model:big-ip advanced firewall managerscope:eqversion:12.1.0 to 12.1.1

Trust: 0.8

vendor:f5model:big-ip analyticsscope:eqversion:12.1.0 to 12.1.1

Trust: 0.8

vendor:f5model:big-ip application acceleration managerscope:eqversion:12.1.0 to 12.1.1

Trust: 0.8

vendor:f5model:big-ip application security managerscope:eqversion:12.1.0 to 12.1.1

Trust: 0.8

vendor:f5model:big-ip domain name systemscope:eqversion:12.1.0 to 12.1.1

Trust: 0.8

vendor:f5model:big-ip link controllerscope:eqversion:12.1.0 to 12.1.1

Trust: 0.8

vendor:f5model:big-ip local traffic managerscope:eqversion:12.1.0 to 12.1.1

Trust: 0.8

vendor:f5model:big-ip policy enforcement managerscope:eqversion:12.1.0 to 12.1.1

Trust: 0.8

vendor:f5model:big-ip websafescope:eqversion:12.1.0 to 12.1.1

Trust: 0.8

vendor:f5model:big-ip websafe hf2scope:eqversion:12.1

Trust: 0.3

vendor:f5model:big-ip websafe hf1scope:eqversion:12.1

Trust: 0.3

vendor:f5model:big-ip websafescope:eqversion:12.1

Trust: 0.3

vendor:f5model:big-ip pemscope:eqversion:12.1.1

Trust: 0.3

vendor:f5model:big-ip pem hf2scope:eqversion:12.1

Trust: 0.3

vendor:f5model:big-ip pem hf1scope:eqversion:12.1

Trust: 0.3

vendor:f5model:big-ip pemscope:eqversion:12.1.0

Trust: 0.3

vendor:f5model:big-ip ltmscope:eqversion:12.1.1

Trust: 0.3

vendor:f5model:big-ip ltm hf2scope:eqversion:12.1

Trust: 0.3

vendor:f5model:big-ip ltm hf1scope:eqversion:12.1

Trust: 0.3

vendor:f5model:big-ip ltmscope:eqversion:12.1.0

Trust: 0.3

vendor:f5model:big-ip link controller hf2scope:eqversion:12.1

Trust: 0.3

vendor:f5model:big-ip link controller hf1scope:eqversion:12.1

Trust: 0.3

vendor:f5model:big-ip dnsscope:eqversion:12.1.1

Trust: 0.3

vendor:f5model:big-ip dnsscope:eqversion:12.1.0

Trust: 0.3

vendor:f5model:big-ip apmscope:eqversion:12.1.1

Trust: 0.3

vendor:f5model:big-ip apm hf2scope:eqversion:12.1

Trust: 0.3

vendor:f5model:big-ip apm hf1scope:eqversion:12.1

Trust: 0.3

vendor:f5model:big-ip apmscope:eqversion:12.1.0

Trust: 0.3

vendor:f5model:big-ip afmscope:eqversion:12.1.1

Trust: 0.3

vendor:f5model:big-ip afm hf2scope:eqversion:12.1

Trust: 0.3

vendor:f5model:big-ip afm hf1scope:eqversion:12.1

Trust: 0.3

vendor:f5model:big-ip afmscope:eqversion:12.1.0

Trust: 0.3

vendor:f5model:big-ip aamscope:eqversion:12.1.1

Trust: 0.3

vendor:f5model:big-ip aam hf2scope:eqversion:12.1

Trust: 0.3

vendor:f5model:big-ip aam hf1scope:eqversion:12.1

Trust: 0.3

vendor:f5model:big-ip aamscope:eqversion:12.1.0

Trust: 0.3

vendor:f5model:big-ip websafescope:neversion:12.1.2

Trust: 0.3

vendor:f5model:big-ip pemscope:neversion:12.1.2

Trust: 0.3

vendor:f5model:big-ip ltmscope:neversion:12.1.2

Trust: 0.3

vendor:f5model:big-ip link controllerscope:neversion:12.1.2

Trust: 0.3

vendor:f5model:big-ip dnsscope:neversion:12.1.2

Trust: 0.3

vendor:f5model:big-ip asmscope:neversion:12.1.2

Trust: 0.3

vendor:f5model:big-ip apmscope:neversion:12.1.2

Trust: 0.3

vendor:f5model:big-ip analyticsscope:neversion:12.1.2

Trust: 0.3

vendor:f5model:big-ip afmscope:neversion:12.1.2

Trust: 0.3

vendor:f5model:big-ip aamscope:neversion:12.1.2

Trust: 0.3

sources: BID: 95405 // JVNDB: JVNDB-2016-006700 // CNNVD: CNNVD-201701-175 // NVD: CVE-2016-9247

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2016-9247
value: MEDIUM

Trust: 1.0

NVD: CVE-2016-9247
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201701-175
value: MEDIUM

Trust: 0.6

VULHUB: VHN-98067
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2016-9247
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-98067
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2016-9247
baseSeverity: MEDIUM
baseScore: 5.9
vectorString: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 2.2
impactScore: 3.6
version: 3.0

Trust: 1.8

sources: VULHUB: VHN-98067 // JVNDB: JVNDB-2016-006700 // CNNVD: CNNVD-201701-175 // NVD: CVE-2016-9247

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.9

sources: VULHUB: VHN-98067 // JVNDB: JVNDB-2016-006700 // NVD: CVE-2016-9247

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201701-175

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-201701-175

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2016-006700

PATCH
title:K33500120: TMM vulnerability CVE-2016-9247url:https://support.f5.com/csp/article/K33500120
Trust: 0.8
title:Multiple F5 BIG-IP Fixes for product input validation vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=66899
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2016-006700 // 
            
            
            
            CNNVD: CNNVD-201701-175

EXTERNAL IDS
db:NVDid:CVE-2016-9247
Trust: 2.8
db:BIDid:95405
Trust: 1.4
db:SECTRACKid:1037581
Trust: 1.1
db:JVNDBid:JVNDB-2016-006700
Trust: 0.8
db:CNNVDid:CNNVD-201701-175
Trust: 0.7
db:VULHUBid:VHN-98067
Trust: 0.1
sources:
            
            
            VULHUB: VHN-98067 // 
            
            
            
            BID: 95405 // 
            
            
            
            JVNDB: JVNDB-2016-006700 // 
            
            
            
            CNNVD: CNNVD-201701-175 // 
            
            
            
            NVD: CVE-2016-9247

REFERENCES
url:https://support.f5.com/csp/#/article/k33500120
Trust: 2.0
url:http://www.securityfocus.com/bid/95405
Trust: 1.1
url:http://www.securitytracker.com/id/1037581
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-9247
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-9247
Trust: 0.8
url:http://www.f5.com/products/big-ip/
Trust: 0.3
sources:
            
            
            VULHUB: VHN-98067 // 
            
            
            
            BID: 95405 // 
            
            
            
            JVNDB: JVNDB-2016-006700 // 
            
            
            
            CNNVD: CNNVD-201701-175 // 
            
            
            
            NVD: CVE-2016-9247

CREDITS
The vendor reported this issue.
Trust: 0.3
sources:
            
            
            BID: 95405

SOURCES
db:VULHUBid:VHN-98067
db:BIDid:95405
db:JVNDBid:JVNDB-2016-006700
db:CNNVDid:CNNVD-201701-175
db:NVDid:CVE-2016-9247

LAST UPDATE DATE
2024-11-23T22:49:09.036000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-98067date:2017-07-27T00:00:00
db:BIDid:95405date:2017-01-23T01:05:00
db:JVNDBid:JVNDB-2016-006700date:2017-01-23T00:00:00
db:CNNVDid:CNNVD-201701-175date:2017-01-11T00:00:00
db:NVDid:CVE-2016-9247date:2024-11-21T03:00:50.790

SOURCES RELEASE DATE
db:VULHUBid:VHN-98067date:2017-01-10T00:00:00
db:BIDid:95405date:2016-12-15T00:00:00
db:JVNDBid:JVNDB-2016-006700date:2017-01-23T00:00:00
db:CNNVDid:CNNVD-201701-175date:2017-01-11T00:00:00
db:NVDid:CVE-2016-9247date:2017-01-10T16:59:00.140