CVE-2017-6151

High

Published: 21/12/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In F5 BIG-IP software version 13.0.0, undisclosed requests made to BIG-IP virtual servers using the 'HTTP/2 profile' may lead to disruption of service to TMM.

Risk Assessment

The organization may experience service outages, which could impact application availability and user satisfaction.

Recommendation

It is recommended to update the software to the latest version and monitor traffic to virtual servers to identify potential unauthorized requests.

Other vulnerabilities in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator i WebSafe

CVE-2017-6164High
In F5 BIG-IP software versions 13.0.0, 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, and 11.5.0 - 11.5.4, the Traffic Management Microkernel (TMM) does not properly handle certain malformed TLS1.2 records, allowing remote attackers to cause a denial-of-service (DoS) or possible remote command execution on the BIG-IP system.

Original NVD description (English source)

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, undisclosed requests made to BIG-IP virtual servers which make use of the "HTTP/2 profile" may result in a disruption of service to TMM.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS