Details of VAR-201703-0918

ID

VAR-201703-0918

CVE

CVE-2016-9245

TITLE

plural F5 BIG-IP In the system TMM Vulnerabilities that cause a restart

Trust: 0.8

sources: JVNDB: JVNDB-2016-007956

DESCRIPTION

In F5 BIG-IP systems 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings. The issue is also exposed with the non-default "Normalize URI" configuration options used in iRules and/or BIG-IP LTM policies. An attacker may be able to disrupt traffic or cause the BIG-IP system to fail over to another device in the device group. Multiple F5 BIG-IP products are prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause a a denial-of-service condition. F5 BIG-IP Analytics and others are products of F5 Corporation of the United States. F5 BIG-IP Analytics is a suite of web application performance analysis software. APM is a set of solutions that provide secure and unified access to business-critical applications and networks. LTM is a local traffic manager. The following products and versions are affected: F5 BIG-IP LTM version 12.1.0 to 12.1.2; BIG-IP AAM version 12.1.0 to 12.1.2; BIG-IP AFM version 12.1.0 to 12.1.2; BIG-IP Analytics version 12.1.0 through 12.1.2; BIG-IP APM version 12.1.0 through 12.1.2; BIG-IP ASM version 12.1.0 through 12.1.2; BIG-IP DNS version 12.1.0 to version 12.1.2; BIG-IP Link Controller version 12.1.0 to version 12.1.2; BIG-IP PEM version 12.1.0 to version 12.1.2; BIG-IP WebSafe version 12.1.0 to version 12.1.2

Trust: 1.98

sources: NVD: CVE-2016-9245 // JVNDB: JVNDB-2016-007956 // BID: 96471 // VULHUB: VHN-98065

AFFECTED PRODUCTS

vendor:	f5	model:	big-ip analytics	scope:	eq	version:	12.1.2	Trust: 1.9
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	12.1.0	Trust: 1.9
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	12.1.2	Trust: 1.6
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	12.1.0	Trust: 1.6
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	12.1.1	Trust: 1.6
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	12.1.2	Trust: 1.6
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	12.1.0	Trust: 1.6
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	12.1.2	Trust: 1.6
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	12.1.0	Trust: 1.6
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	12.1.1	Trust: 1.6
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	12.1.1	Trust: 1.3
vendor:	f5	model:	big-ip websafe	scope:	eq	version:	12.1.2	Trust: 1.3
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	12.1.0	Trust: 1.3
vendor:	f5	model:	big-ip websafe	scope:	eq	version:	12.1.1	Trust: 1.3
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	12.1.2	Trust: 1.3
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	12.1.1	Trust: 1.3
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	12.1.2	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	12.1.1	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	12.1.1	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	12.1.1	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	12.1.1	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	12.1.1	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	12.1.0	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	12.1.0	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	12.1.0	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	12.1.2	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	12.1.2	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	12.1.0	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	12.1.2	Trust: 1.0
vendor:	f5	model:	big-ip websafe	scope:	eq	version:	12.1.0	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	12.1.0 to 12.1.2	Trust: 0.8
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	12.1.0 to 12.1.2	Trust: 0.8
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	12.1.0 to 12.1.2	Trust: 0.8
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	12.1.0 to 12.1.2	Trust: 0.8
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	12.1.0 to 12.1.2	Trust: 0.8
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	12.1.0 to 12.1.2	Trust: 0.8
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	12.1.0 to 12.1.2	Trust: 0.8
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	12.1.0 to 12.1.2	Trust: 0.8
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	12.1.0 to 12.1.2	Trust: 0.8
vendor:	f5	model:	big-ip websafe	scope:	eq	version:	12.1.0 to 12.1.2	Trust: 0.8
vendor:	f5	model:	big-ip apm	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf7	scope:	ne	version:	11.5	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf4	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf6	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip aam hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip asm hf7	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip afm hf4	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip afm hf10	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip analytics build	scope:	ne	version:	11.5.40.1.256	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	eq	version:	12.1.2	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf2	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf1	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip apm hf3	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip aam hf5	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip psm hf8	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf4	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip asm hf5	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	eq	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	ne	version:	11.5.2	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf2	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	ne	version:	11.5	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip afm hf8	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip aam hf8	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	ne	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip link controller build	scope:	ne	version:	11.66.204.442	Trust: 0.3
vendor:	f5	model:	big-ip psm hf10	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip apm hf3	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip aam hf9	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip aam hf2	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip asm hf2	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip asm hf9	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip apm hf2	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	ne	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	ne	version:	11.5	Trust: 0.3
vendor:	f5	model:	big-ip apm build	scope:	ne	version:	11.5.40.1.256	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf8	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip apm hf11	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf9	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip aam hf1	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip aam hf10	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip aam hf8	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip dns	scope:	eq	version:	12.1.2	Trust: 0.3
vendor:	f5	model:	big-ip asm build	scope:	ne	version:	11.66.204.442	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	ne	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf3	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	ne	version:	11.5	Trust: 0.3
vendor:	f5	model:	big-ip afm build	scope:	ne	version:	11.5.40.1.256	Trust: 0.3
vendor:	f5	model:	big-ip apm hf10	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip afm hf2	scope:	eq	version:	12.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm build	scope:	ne	version:	11.5.110.104.180	Trust: 0.3
vendor:	f5	model:	big-ip afm hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	ne	version:	13.0	Trust: 0.3
vendor:	f5	model:	big-ip apm hf2	scope:	eq	version:	12.1	Trust: 0.3
vendor:	f5	model:	big-ip afm hf1	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip apm hf8	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip aam hf1	scope:	eq	version:	12.1	Trust: 0.3
vendor:	f5	model:	big-ip websafe hf8	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf8	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf10	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip asm hf10	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics build	scope:	ne	version:	11.5.110.104.180	Trust: 0.3
vendor:	f5	model:	big-ip aam build	scope:	ne	version:	11.5.40.1.256	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	ne	version:	11.5.2	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	ne	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip asm hf4	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	eq	version:	12.1.2	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	ne	version:	11.5	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf7	scope:	ne	version:	11.5	Trust: 0.3
vendor:	f5	model:	big-ip apm hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip apm hf8	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip asm hf1	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip aam hf4	scope:	ne	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf8	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip afm hf2	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip aam hf1	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	ne	version:	11.5	Trust: 0.3
vendor:	f5	model:	big-ip asm hf1	scope:	eq	version:	12.1	Trust: 0.3
vendor:	f5	model:	big-ip aam hf2	scope:	eq	version:	12.1	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	ne	version:	11.5.2	Trust: 0.3
vendor:	f5	model:	big-ip aam hf11	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf2	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip afm hf1	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip apm hf4	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf9	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip apm hf7	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip aam hf4	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip asm hf3	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	ne	version:	11.5.2	Trust: 0.3
vendor:	f5	model:	big-ip aam hf2	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip apm hf2	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip afm hf8	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip apm hf10	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip aam hf1	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip apm build	scope:	ne	version:	11.66.204.442	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf8	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	eq	version:	12.1.1	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	ne	version:	11.5.2	Trust: 0.3
vendor:	f5	model:	big-ip afm hf2	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf6	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip afm hf1	scope:	eq	version:	12.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf10	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	eq	version:	12.1.1	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	ne	version:	13.0	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	ne	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip asm hf1	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip afm build	scope:	ne	version:	11.66.204.442	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip dns	scope:	ne	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf6	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip asm build	scope:	ne	version:	11.5.110.104.180	Trust: 0.3
vendor:	f5	model:	big-ip asm hf8	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip afm hf9	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf2	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	ne	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip afm hf1	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip apm build 685-hf10	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf9	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip aam hf7	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	ne	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf5	scope:	ne	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip aam build	scope:	ne	version:	11.66.204.442	Trust: 0.3
vendor:	f5	model:	big-ip afm hf10	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf2	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip apm hf1	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip asm hf8	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf2	scope:	eq	version:	12.1	Trust: 0.3
vendor:	f5	model:	big-ip asm hf1	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	ne	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf11	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf10	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf7	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	ne	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip dns	scope:	eq	version:	12.1.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf10	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf2	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	eq	version:	12.1.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf5	scope:	ne	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip apm hf5	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	ne	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip afm hf6	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip dns	scope:	ne	version:	13.0	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	ne	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf2	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip psm	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip apm hf2	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	ne	version:	13.0	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip aam hf3	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf5	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip apm hf9	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip apm hf1	scope:	eq	version:	12.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf10	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip apm hf4	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip apm hf5	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip aam hf8	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	ne	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip afm hf6	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip websafe	scope:	ne	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	ne	version:	11.5.0	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	ne	version:	12.0	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	ne	version:	13.0	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	eq	version:	12.1.1	Trust: 0.3
vendor:	f5	model:	big-ip afm hf8	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip aam hf10	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf5	scope:	ne	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip apm hf1	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf11	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip apm build	scope:	ne	version:	11.5.110.104.180	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	eq	version:	12.1.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf1	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	ne	version:	13.0	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	ne	version:	11.5.2	Trust: 0.3
vendor:	f5	model:	big-ip afm hf10	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf8	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip afm build 685-hf10	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip asm hf10	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf5	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf7	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip asm hf11	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip asm hf2	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip asm hf9	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip afm hf4	scope:	ne	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip afm hf5	scope:	ne	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf2	scope:	eq	version:	12.1	Trust: 0.3
vendor:	f5	model:	big-ip afm hf11	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	ne	version:	13.0	Trust: 0.3
vendor:	f5	model:	big-ip afm build	scope:	ne	version:	11.5.110.104.180	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf8	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm build	scope:	ne	version:	11.5.40.1.256	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf9	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip aam hf10	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip apm hf8	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip aam hf5	scope:	ne	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip websafe	scope:	ne	version:	13.0	Trust: 0.3
vendor:	f5	model:	big-ip apm hf6	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip apm hf1	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip ltm build 685-hf10	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf8	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf11	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip asm hf5	scope:	ne	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf4	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip afm hf5	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf4	scope:	ne	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip afm hf7	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	eq	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip aam build	scope:	ne	version:	11.5.110.104.180	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip apm hf10	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf1	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf10	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf6	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics build 685-hf10	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip asm hf2	scope:	eq	version:	12.1	Trust: 0.3
vendor:	f5	model:	big-ip aam hf6	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip websafe	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf4	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf4	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	ne	version:	11.6.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf1	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf3	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf10	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	ne	version:	11.4.0	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf8	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf6	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip afm hf2	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf1	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip aam hf6	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip asm hf2	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf5	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	ne	version:	11.4.0	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf3	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip asm hf10	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	ne	version:	11.5	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf7	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf1	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf6	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	eq	version:	12.1.2	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf1	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip psm hf2	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip aam hf9	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip afm hf3	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip websafe	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip link controller build	scope:	ne	version:	11.5.40.1.256	Trust: 0.3
vendor:	f5	model:	big-ip dns	scope:	eq	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf8	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf9	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip websafe hf1	scope:	eq	version:	12.1	Trust: 0.3
vendor:	f5	model:	big-ip afm hf9	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip asm hf4	scope:	ne	version:	11.6.0	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	ne	version:	11.5.2	Trust: 0.3
vendor:	f5	model:	big-ip aam hf2	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf9	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	eq	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip asm hf2	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf1	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip asm hf8	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip ltm build	scope:	ne	version:	11.66.204.442	Trust: 0.3
vendor:	f5	model:	big-ip psm hf9	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip asm build	scope:	ne	version:	11.5.40.1.256	Trust: 0.3
vendor:	f5	model:	big-ip asm hf6	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf1	scope:	eq	version:	12.1	Trust: 0.3
vendor:	f5	model:	big-ip websafe hf2	scope:	eq	version:	12.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf2	scope:	ne	version:	11.5.3	Trust: 0.3
vendor:	f5	model:	big-ip analytics	scope:	ne	version:	13.0	Trust: 0.3
vendor:	f5	model:	big-ip asm hf1	scope:	eq	version:	12.1.1	Trust: 0.3
vendor:	f5	model:	big-ip analytics build	scope:	ne	version:	11.66.204.442	Trust: 0.3
vendor:	f5	model:	big-ip apm hf1	scope:	ne	version:	11.5.2	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip analytics hf8	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	eq	version:	12.1.2	Trust: 0.3
vendor:	f5	model:	big-ip apm hf6	scope:	ne	version:	11.6	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf2	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	eq	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip asm hf6	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip aam build 685-hf10	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip psm	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip link controller hf1	scope:	eq	version:	12.1	Trust: 0.3
vendor:	f5	model:	big-ip apm	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf1	scope:	ne	version:	11.5.4	Trust: 0.3
vendor:	f5	model:	big-ip aam	scope:	eq	version:	12.1.0	Trust: 0.3
vendor:	f5	model:	big-ip websafe	scope:	eq	version:	12.1	Trust: 0.3
vendor:	f5	model:	big-ip apm hf9	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip asm build 685-hf10	scope:	ne	version:	11.4.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm	scope:	ne	version:	11.2.1	Trust: 0.3
vendor:	f5	model:	big-ip ltm hf10	scope:	ne	version:	11.4	Trust: 0.3
vendor:	f5	model:	big-ip link controller	scope:	ne	version:	11.5.1	Trust: 0.3
vendor:	f5	model:	big-ip asm	scope:	eq	version:	12.1.2	Trust: 0.3
vendor:	f5	model:	big-ip afm	scope:	ne	version:	11.4	Trust: 0.3

sources: BID: 96471 // JVNDB: JVNDB-2016-007956 // CNNVD: CNNVD-201702-958 // NVD: CVE-2016-9245

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2016-9245
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2016-9245
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201702-958
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-98065
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2016-9245
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-98065
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2016-9245
baseSeverity:	MEDIUM
baseScore:	5.9
vectorString:	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	HIGH
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	2.2
impactScore:	3.6
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-98065 // JVNDB: JVNDB-2016-007956 // CNNVD: CNNVD-201702-958 // NVD: CVE-2016-9245

PROBLEMTYPE DATA

problemtype:

CWE-284

Trust: 1.9

sources: VULHUB: VHN-98065 // JVNDB: JVNDB-2016-007956 // NVD: CVE-2016-9245

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201702-958

TYPE

lack of information

Trust: 0.6

sources: CNNVD: CNNVD-201702-958

CONFIGURATIONS

sources: JVNDB: JVNDB-2016-007956

PATCH

title:	K22216037	url:	https://support.f5.com/csp/article/K22216037	Trust: 0.8
title:	Multiple F5 BIG-IP Product security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=68049	Trust: 0.6

sources: JVNDB: JVNDB-2016-007956 // CNNVD: CNNVD-201702-958

EXTERNAL IDS

db:	NVD	id:	CVE-2016-9245	Trust: 2.8
db:	BID	id:	96471	Trust: 2.0
db:	SECTRACK	id:	1037964	Trust: 1.1
db:	JVNDB	id:	JVNDB-2016-007956	Trust: 0.8
db:	CNNVD	id:	CNNVD-201702-958	Trust: 0.7
db:	VULHUB	id:	VHN-98065	Trust: 0.1

sources: VULHUB: VHN-98065 // BID: 96471 // JVNDB: JVNDB-2016-007956 // CNNVD: CNNVD-201702-958 // NVD: CVE-2016-9245

REFERENCES

url:	https://support.f5.com/csp/article/k22216037	Trust: 2.0
url:	http://www.securityfocus.com/bid/96471	Trust: 1.7
url:	http://www.securitytracker.com/id/1037964	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-9245	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2016-9245	Trust: 0.8
url:	http://www.f5.com/products/big-ip/	Trust: 0.3

sources: VULHUB: VHN-98065 // BID: 96471 // JVNDB: JVNDB-2016-007956 // CNNVD: CNNVD-201702-958 // NVD: CVE-2016-9245

CREDITS

The vendor reported this issue.

Trust: 0.3

sources: BID: 96471

SOURCES

db:	VULHUB	id:	VHN-98065
db:	BID	id:	96471
db:	JVNDB	id:	JVNDB-2016-007956
db:	CNNVD	id:	CNNVD-201702-958
db:	NVD	id:	CVE-2016-9245

LAST UPDATE DATE

2024-11-23T22:52:32.399000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-98065	date:	2017-07-17T00:00:00
db:	BID	id:	96471	date:	2017-03-07T01:08:00
db:	JVNDB	id:	JVNDB-2016-007956	date:	2017-03-31T00:00:00
db:	CNNVD	id:	CNNVD-201702-958	date:	2017-03-08T00:00:00
db:	NVD	id:	CVE-2016-9245	date:	2024-11-21T03:00:50.650

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-98065	date:	2017-03-07T00:00:00
db:	BID	id:	96471	date:	2017-02-24T00:00:00
db:	JVNDB	id:	JVNDB-2016-007956	date:	2017-03-31T00:00:00
db:	CNNVD	id:	CNNVD-201702-958	date:	2017-02-24T00:00:00
db:	NVD	id:	CVE-2016-9245	date:	2017-03-07T21:59:00.217