CVE-2017-6164
HighSummary
In F5 BIG-IP software versions 13.0.0, 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, and 11.5.0 - 11.5.4, the Traffic Management Microkernel (TMM) does not properly handle certain malformed TLS1.2 records, allowing remote attackers to cause a denial-of-service (DoS) or possible remote command execution on the BIG-IP system.
Risk Assessment
This vulnerability poses a risk of denial-of-service and potential remote command execution, which could lead to significant disruptions in system operation and security breaches.
Recommendation
It is recommended to update the software to the latest version that includes security patches to minimize the risks associated with this vulnerability.
Other vulnerabilities in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe
Original NVD description (English source)
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, 12.0.0 - 12.1.2, 11.6.0 - 11.6.1 and 11.5.0 - 11.5.4, in some circumstances, Traffic Management Microkernel (TMM) does not properly handle certain malformed TLS1.2 records, which allows remote attackers to cause a denial-of-service (DoS) or possible remote command execution on the BIG-IP system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS