ID

VAR-201804-0511


CVE

CVE-2017-6158


TITLE

plural F5 BIG-IP Data processing vulnerabilities in products

Trust: 0.8

sources: JVNDB: JVNDB-2017-013270

DESCRIPTION

In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling of invalid IP addresses. plural F5 BIG-IP The product contains data processing vulnerabilities.Tampering with information and disrupting service operations (DoS) There is a possibility of being put into a state. F5 BIG-IP LTM, etc. are all products of F5 Company in the United States. LTM is a local traffic manager; APM is a solution that provides secure unified access to business-critical applications and networks. Traffic Management Microkernel (TMM) is one of the service processes that performs traffic management. A security vulnerability exists in TMM in several F5 products. An attacker could exploit this vulnerability to cause the TMM to reboot or cause the BIG-IP system to fail over to a peer device. The following products and versions are affected: F5 BIG-IP LTM Versions 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.5.1 to 11.5.5, 11.2.1; BIG-IP AAM 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.5.1 to 11.5.5, 11.2.1; BIG-IP AFM 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.5.1 to 11.5.5, 11.2.1; BIG-IP Analytics 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.5 .1 to 11.5.5, 11.2.1; BIG-IP APM 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.5.1 to 11.5.5, 11.2. 1 version; BIG-IP ASM version 12.0.0 through 12.1.2, version 11.6.0 through version 11.6.1, version 11.5.1 through version 11.5.5, version 11.2.1; BIG-IP DNS version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.5.1 to 11.5.5, 11.2.1; BIG-IP Edge Gateway 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.5.1 to 11.5.5, 11.2.1; BIG-IP GTM 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.5

Trust: 1.8

sources: NVD: CVE-2017-6158 // JVNDB: JVNDB-2017-013270 // VULHUB: VHN-114361 // VULMON: CVE-2017-6158

AFFECTED PRODUCTS

vendor:f5model:big-ip domain name systemscope:eqversion:11.2.1

Trust: 2.4

vendor:f5model:big-ip access policy managerscope:eqversion:11.2.1

Trust: 1.8

vendor:f5model:big-ip advanced firewall managerscope:eqversion:11.2.1

Trust: 1.8

vendor:f5model:big-ip analyticsscope:eqversion:11.2.1

Trust: 1.8

vendor:f5model:big-ip application acceleration managerscope:eqversion:11.2.1

Trust: 1.8

vendor:f5model:big-ip application security managerscope:eqversion:11.2.1

Trust: 1.8

vendor:f5model:big-ip edge gatewayscope:eqversion:11.2.1

Trust: 1.8

vendor:f5model:big-ip global traffic managerscope:eqversion:11.2.1

Trust: 1.8

vendor:f5model:big-ip link controllerscope:eqversion:11.2.1

Trust: 1.8

vendor:f5model:big-ip local traffic managerscope:eqversion:11.2.1

Trust: 1.8

vendor:f5model:big-ip policy enforcement managerscope:eqversion:11.2.1

Trust: 1.8

vendor:f5model:big-ip webacceleratorscope:eqversion:11.2.1

Trust: 1.8

vendor:f5model:big-ip websafescope:eqversion:11.2.1

Trust: 1.8

vendor:f5model:big-ip access policy managerscope:lteversion:11.6.1

Trust: 1.0

vendor:f5model:big-ip advanced firewall managerscope:gteversion:11.6.0

Trust: 1.0

vendor:f5model:big-ip local traffic managerscope:lteversion:12.1.2

Trust: 1.0

vendor:f5model:big-ip edge gatewayscope:gteversion:11.6.0

Trust: 1.0

vendor:f5model:big-ip advanced firewall managerscope:lteversion:11.6.1

Trust: 1.0

vendor:f5model:big-ip application security managerscope:gteversion:11.6.0

Trust: 1.0

vendor:f5model:big-ip websafescope:gteversion:12.0.0

Trust: 1.0

vendor:f5model:big-ip local traffic managerscope:gteversion:12.0.0

Trust: 1.0

vendor:f5model:big-ip analyticsscope:gteversion:11.5.1

Trust: 1.0

vendor:f5model:big-ip webacceleratorscope:lteversion:11.5.5

Trust: 1.0

vendor:f5model:big-ip access policy managerscope:gteversion:11.6.0

Trust: 1.0

vendor:f5model:big-ip advanced firewall managerscope:gteversion:12.0.0

Trust: 1.0

vendor:f5model:big-ip domain name systemscope:gteversion:11.6.0

Trust: 1.0

vendor:f5model:big-ip websafescope:gteversion:11.5.1

Trust: 1.0

vendor:f5model:big-ip link controllerscope:gteversion:11.6.0

Trust: 1.0

vendor:f5model:big-ip domain name systemscope:lteversion:11.6.1

Trust: 1.0

vendor:f5model:big-ip webacceleratorscope:lteversion:12.1.2

Trust: 1.0

vendor:f5model:big-ip policy enforcement managerscope:gteversion:11.6.0

Trust: 1.0

vendor:f5model:big-ip advanced firewall managerscope:gteversion:11.5.1

Trust: 1.0

vendor:f5model:big-ip link controllerscope:lteversion:12.1.2

Trust: 1.0

vendor:f5model:big-ip domain name systemscope:gteversion:12.0.0

Trust: 1.0

vendor:f5model:big-ip analyticsscope:lteversion:11.6.1

Trust: 1.0

vendor:f5model:big-ip policy enforcement managerscope:lteversion:11.5.5

Trust: 1.0

vendor:f5model:big-ip application acceleration managerscope:lteversion:11.5.5

Trust: 1.0

vendor:f5model:big-ip policy enforcement managerscope:lteversion:11.6.1

Trust: 1.0

vendor:f5model:big-ip application acceleration managerscope:lteversion:11.6.1

Trust: 1.0

vendor:f5model:big-ip global traffic managerscope:lteversion:11.5.5

Trust: 1.0

vendor:f5model:big-ip analyticsscope:gteversion:11.6.0

Trust: 1.0

vendor:f5model:big-ip global traffic managerscope:lteversion:11.6.1

Trust: 1.0

vendor:f5model:big-ip websafescope:lteversion:11.6.1

Trust: 1.0

vendor:f5model:big-ip edge gatewayscope:lteversion:11.5.5

Trust: 1.0

vendor:f5model:big-ip application acceleration managerscope:gteversion:12.0.0

Trust: 1.0

vendor:f5model:big-ip local traffic managerscope:lteversion:11.5.5

Trust: 1.0

vendor:f5model:big-ip application security managerscope:lteversion:11.5.5

Trust: 1.0

vendor:f5model:big-ip local traffic managerscope:lteversion:11.6.1

Trust: 1.0

vendor:f5model:big-ip websafescope:gteversion:11.6.0

Trust: 1.0

vendor:f5model:big-ip access policy managerscope:lteversion:11.5.5

Trust: 1.0

vendor:f5model:big-ip advanced firewall managerscope:lteversion:11.5.5

Trust: 1.0

vendor:f5model:big-ip application acceleration managerscope:gteversion:11.5.1

Trust: 1.0

vendor:f5model:big-ip edge gatewayscope:lteversion:12.1.2

Trust: 1.0

vendor:f5model:big-ip application security managerscope:lteversion:12.1.2

Trust: 1.0

vendor:f5model:big-ip global traffic managerscope:gteversion:11.5.1

Trust: 1.0

vendor:f5model:big-ip access policy managerscope:lteversion:12.1.2

Trust: 1.0

vendor:f5model:big-ip edge gatewayscope:gteversion:12.0.0

Trust: 1.0

vendor:f5model:big-ip webacceleratorscope:gteversion:11.6.0

Trust: 1.0

vendor:f5model:big-ip advanced firewall managerscope:lteversion:12.1.2

Trust: 1.0

vendor:f5model:big-ip application security managerscope:gteversion:12.0.0

Trust: 1.0

vendor:f5model:big-ip webacceleratorscope:lteversion:11.6.1

Trust: 1.0

vendor:f5model:big-ip domain name systemscope:lteversion:11.5.5

Trust: 1.0

vendor:f5model:big-ip link controllerscope:lteversion:11.5.5

Trust: 1.0

vendor:f5model:big-ip local traffic managerscope:gteversion:11.5.1

Trust: 1.0

vendor:f5model:big-ip link controllerscope:lteversion:11.6.1

Trust: 1.0

vendor:f5model:big-ip access policy managerscope:gteversion:12.0.0

Trust: 1.0

vendor:f5model:big-ip edge gatewayscope:gteversion:11.5.1

Trust: 1.0

vendor:f5model:big-ip analyticsscope:lteversion:11.5.5

Trust: 1.0

vendor:f5model:big-ip webacceleratorscope:gteversion:12.0.0

Trust: 1.0

vendor:f5model:big-ip application security managerscope:gteversion:11.5.1

Trust: 1.0

vendor:f5model:big-ip domain name systemscope:lteversion:12.1.2

Trust: 1.0

vendor:f5model:big-ip link controllerscope:gteversion:12.0.0

Trust: 1.0

vendor:f5model:big-ip access policy managerscope:gteversion:11.5.1

Trust: 1.0

vendor:f5model:big-ip application acceleration managerscope:gteversion:11.6.0

Trust: 1.0

vendor:f5model:big-ip policy enforcement managerscope:gteversion:12.0.0

Trust: 1.0

vendor:f5model:big-ip websafescope:lteversion:11.5.5

Trust: 1.0

vendor:f5model:big-ip webacceleratorscope:gteversion:11.5.1

Trust: 1.0

vendor:f5model:big-ip domain name systemscope:gteversion:11.5.1

Trust: 1.0

vendor:f5model:big-ip analyticsscope:lteversion:12.1.2

Trust: 1.0

vendor:f5model:big-ip global traffic managerscope:gteversion:11.6.0

Trust: 1.0

vendor:f5model:big-ip link controllerscope:gteversion:11.5.1

Trust: 1.0

vendor:f5model:big-ip policy enforcement managerscope:lteversion:12.1.2

Trust: 1.0

vendor:f5model:big-ip application acceleration managerscope:lteversion:12.1.2

Trust: 1.0

vendor:f5model:big-ip edge gatewayscope:lteversion:11.6.1

Trust: 1.0

vendor:f5model:big-ip local traffic managerscope:gteversion:11.6.0

Trust: 1.0

vendor:f5model:big-ip analyticsscope:gteversion:12.0.0

Trust: 1.0

vendor:f5model:big-ip policy enforcement managerscope:gteversion:11.5.1

Trust: 1.0

vendor:f5model:big-ip global traffic managerscope:lteversion:12.1.2

Trust: 1.0

vendor:f5model:big-ip application security managerscope:lteversion:11.6.1

Trust: 1.0

vendor:f5model:big-ip websafescope:lteversion:12.1.2

Trust: 1.0

vendor:f5model:big-ip global traffic managerscope:gteversion:12.0.0

Trust: 1.0

vendor:f5model:big-ip access policy managerscope:eqversion:11.5.1 to 11.5.5

Trust: 0.8

vendor:f5model:big-ip access policy managerscope:eqversion:11.6.0 to 11.6.1

Trust: 0.8

vendor:f5model:big-ip access policy managerscope:eqversion:12.0.0 to 12.1.2

Trust: 0.8

vendor:f5model:big-ip advanced firewall managerscope:eqversion:11.5.1 to 11.5.5

Trust: 0.8

vendor:f5model:big-ip advanced firewall managerscope:eqversion:11.6.0 to 11.6.1

Trust: 0.8

vendor:f5model:big-ip advanced firewall managerscope:eqversion:12.0.0 to 12.1.2

Trust: 0.8

vendor:f5model:big-ip analyticsscope:eqversion:11.5.1 to 11.5.5

Trust: 0.8

vendor:f5model:big-ip analyticsscope:eqversion:11.6.0 to 11.6.1

Trust: 0.8

vendor:f5model:big-ip analyticsscope:eqversion:12.0.0 to 12.1.2

Trust: 0.8

vendor:f5model:big-ip application acceleration managerscope:eqversion:11.5.1 to 11.5.5

Trust: 0.8

vendor:f5model:big-ip application acceleration managerscope:eqversion:11.6.0 to 11.6.1

Trust: 0.8

vendor:f5model:big-ip application acceleration managerscope:eqversion:12.0.0 to 12.1.2

Trust: 0.8

vendor:f5model:big-ip application security managerscope:eqversion:11.5.1 to 11.5.5

Trust: 0.8

vendor:f5model:big-ip application security managerscope:eqversion:11.6.0 to 11.6.1

Trust: 0.8

vendor:f5model:big-ip application security managerscope:eqversion:12.0.0 to 12.1.2

Trust: 0.8

vendor:f5model:big-ip domain name systemscope:eqversion:11.5.1 to 11.5.5

Trust: 0.8

vendor:f5model:big-ip domain name systemscope:eqversion:11.6.0 to 11.6.1

Trust: 0.8

vendor:f5model:big-ip domain name systemscope:eqversion:12.0.0 to 12.1.2

Trust: 0.8

vendor:f5model:big-ip edge gatewayscope:eqversion:11.5.1 to 11.5.5

Trust: 0.8

vendor:f5model:big-ip edge gatewayscope:eqversion:11.6.0 to 11.6.1

Trust: 0.8

vendor:f5model:big-ip edge gatewayscope:eqversion:12.0.0 to 12.1.2

Trust: 0.8

vendor:f5model:big-ip global traffic managerscope:eqversion:11.5.1 to 11.5.5

Trust: 0.8

vendor:f5model:big-ip global traffic managerscope:eqversion:11.6.0 to 11.6.1

Trust: 0.8

vendor:f5model:big-ip global traffic managerscope:eqversion:12.0.0 to 12.1.2

Trust: 0.8

vendor:f5model:big-ip link controllerscope:eqversion:11.5.1 to 11.5.5

Trust: 0.8

vendor:f5model:big-ip link controllerscope:eqversion:11.6.0 to 11.6.1

Trust: 0.8

vendor:f5model:big-ip link controllerscope:eqversion:12.0.0 to 12.1.2

Trust: 0.8

vendor:f5model:big-ip local traffic managerscope:eqversion:11.5.1 to 11.5.5

Trust: 0.8

vendor:f5model:big-ip local traffic managerscope:eqversion:11.6.0 to 11.6.1

Trust: 0.8

vendor:f5model:big-ip local traffic managerscope:eqversion:12.0.0 to 12.1.2

Trust: 0.8

vendor:f5model:big-ip policy enforcement managerscope:eqversion:11.5.1 to 11.5.5

Trust: 0.8

vendor:f5model:big-ip policy enforcement managerscope:eqversion:11.6.0 to 11.6.1

Trust: 0.8

vendor:f5model:big-ip policy enforcement managerscope:eqversion:12.0.0 to 12.1.2

Trust: 0.8

vendor:f5model:big-ip webacceleratorscope:eqversion:11.5.1 to 11.5.5

Trust: 0.8

vendor:f5model:big-ip webacceleratorscope:eqversion:11.6.0 to 11.6.1

Trust: 0.8

vendor:f5model:big-ip webacceleratorscope:eqversion:12.0.0 to 12.1.2

Trust: 0.8

vendor:f5model:big-ip websafescope:eqversion:11.5.1 to 11.5.5

Trust: 0.8

vendor:f5model:big-ip websafescope:eqversion:11.6.0 to 11.6.1

Trust: 0.8

vendor:f5model:big-ip websafescope:eqversion:12.0.0 to 12.1.2

Trust: 0.8

vendor:f5model:big-ip domain name systemscope:eqversion:11.5.4

Trust: 0.6

vendor:f5model:big-ip domain name systemscope:eqversion:12.1.1

Trust: 0.6

vendor:f5model:big-ip domain name systemscope:eqversion:11.5.3

Trust: 0.6

vendor:f5model:big-ip domain name systemscope:eqversion:11.5.1

Trust: 0.6

vendor:f5model:big-ip domain name systemscope:eqversion:11.6.0

Trust: 0.6

vendor:f5model:big-ip domain name systemscope:eqversion:12.0.0

Trust: 0.6

vendor:f5model:big-ip domain name systemscope:eqversion:11.6.1

Trust: 0.6

vendor:f5model:big-ip domain name systemscope:eqversion:12.1.0

Trust: 0.6

vendor:f5model:big-ip domain name systemscope:eqversion:11.5.2

Trust: 0.6

sources: JVNDB: JVNDB-2017-013270 // CNNVD: CNNVD-201804-709 // NVD: CVE-2017-6158

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2017-6158
value: MEDIUM

Trust: 1.0

NVD: CVE-2017-6158
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201804-709
value: MEDIUM

Trust: 0.6

VULHUB: VHN-114361
value: MEDIUM

Trust: 0.1

VULMON: CVE-2017-6158
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2017-6158
severity: MEDIUM
baseScore: 6.4
vectorString: AV:N/AC:L/AU:N/C:N/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

VULHUB: VHN-114361
severity: MEDIUM
baseScore: 6.4
vectorString: AV:N/AC:L/AU:N/C:N/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2017-6158
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: LOW
exploitabilityScore: 3.9
impactScore: 2.5
version: 3.0

Trust: 1.8

sources: VULHUB: VHN-114361 // VULMON: CVE-2017-6158 // JVNDB: JVNDB-2017-013270 // CNNVD: CNNVD-201804-709 // NVD: CVE-2017-6158

PROBLEMTYPE DATA

problemtype:NVD-CWE-noinfo

Trust: 1.0

problemtype:CWE-19

Trust: 0.9

sources: VULHUB: VHN-114361 // JVNDB: JVNDB-2017-013270 // NVD: CVE-2017-6158

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201804-709

TYPE

lack of information

Trust: 0.6

sources: CNNVD: CNNVD-201804-709

CONFIGURATIONS

sources: JVNDB: JVNDB-2017-013270

PATCH

title:K19361245url:https://support.f5.com/csp/article/K19361245

Trust: 0.8

title:Multiple F5 product Traffic Management Microkernel Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=80117

Trust: 0.6

sources: JVNDB: JVNDB-2017-013270 // CNNVD: CNNVD-201804-709

EXTERNAL IDS

db:NVDid:CVE-2017-6158

Trust: 2.6

db:JVNDBid:JVNDB-2017-013270

Trust: 0.8

db:CNNVDid:CNNVD-201804-709

Trust: 0.6

db:VULHUBid:VHN-114361

Trust: 0.1

db:VULMONid:CVE-2017-6158

Trust: 0.1

sources: VULHUB: VHN-114361 // VULMON: CVE-2017-6158 // JVNDB: JVNDB-2017-013270 // CNNVD: CNNVD-201804-709 // NVD: CVE-2017-6158

REFERENCES

url:https://support.f5.com/csp/article/k19361245

Trust: 1.8

url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-6158

Trust: 0.8

url:https://nvd.nist.gov/vuln/detail/cve-2017-6158

Trust: 0.8

url:https://cwe.mitre.org/data/definitions/.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

sources: VULHUB: VHN-114361 // VULMON: CVE-2017-6158 // JVNDB: JVNDB-2017-013270 // CNNVD: CNNVD-201804-709 // NVD: CVE-2017-6158

SOURCES

db:VULHUBid:VHN-114361
db:VULMONid:CVE-2017-6158
db:JVNDBid:JVNDB-2017-013270
db:CNNVDid:CNNVD-201804-709
db:NVDid:CVE-2017-6158

LAST UPDATE DATE

2024-11-23T22:00:37.975000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-114361date:2019-10-03T00:00:00
db:VULMONid:CVE-2017-6158date:2019-10-03T00:00:00
db:JVNDBid:JVNDB-2017-013270date:2018-06-14T00:00:00
db:CNNVDid:CNNVD-201804-709date:2019-10-23T00:00:00
db:NVDid:CVE-2017-6158date:2024-11-21T03:29:09.910

SOURCES RELEASE DATE

db:VULHUBid:VHN-114361date:2018-04-13T00:00:00
db:VULMONid:CVE-2017-6158date:2018-04-13T00:00:00
db:JVNDBid:JVNDB-2017-013270date:2018-06-14T00:00:00
db:CNNVDid:CNNVD-201804-709date:2018-04-16T00:00:00
db:NVDid:CVE-2017-6158date:2018-04-13T13:29:00.423