CVE-2016-5023

High

Published: 26/08/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Virtual servers in F5 BIG-IP systems in versions 11.2.1 HF11 through HF15, 11.4.1 HF4 through HF10, 11.5.3 through 11.5.4, 11.6.0 HF5 through HF7, and 12.0.0, when configured with a TCP profile, allow remote attackers to cause a denial of service via crafted network traffic.

Risk Assessment

Attackers can exploit this vulnerability to disrupt server operations, leading to service availability interruptions for users.

Recommendation

It is recommended to update F5 BIG-IP systems to the latest versions that mitigate this vulnerability and to monitor network traffic for potential attacks.

Other vulnerabilities in F5 BIG-IP systems

CVE-2016-5700Critical
Virtual servers in F5 BIG-IP systems in versions 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2, when configured with HTTP Explicit Proxy functionality or SOCKS profile, allow remote attackers to modify system configuration, read system files, and possibly execute arbitrary code via unspecified vectors.

Original NVD description (English source)

Virtual servers in F5 BIG-IP systems 11.2.1 HF11 through HF15, 11.4.1 HF4 through HF10, 11.5.3 through 11.5.4, 11.6.0 HF5 through HF7, and 12.0.0, when configured with a TCP profile, allow remote attackers to cause a denial of service (Traffic Management Microkernel restart) via crafted network traffic.