CVE-2017-6159: f5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafe
Vulnerability summary
CVE-2017-6159 is a medium (CVSS 5.9) vulnerability in f5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafe. EPSS estimates a 1.59% chance of exploitation in the next 30 days, higher than 75.4% of scored vulnerabilities.
Timeline
- 27-10-2017PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 are vulnerable to a denial of service attack when the MPTCP option is enabled on a virtual server. Data plane is vulnerable when using the MPTCP option of a TCP profile. There is no control plane exposure. An attacker may be able to disrupt services by causing TMM to restart hence temporarily failing to process traffic.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.59%
Chance of exploitation in the next 30 days
Percentile
75%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.59% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
F58 products
- big-ip_access_policy_manager11.6.0 | 11.6.1 | 12.0.0 | 12.1.0 | 12.1.1 | 12.1.2
- big-ip_advanced_firewall_manager11.6.0 | 11.6.1 | 12.0.0 | 12.1.0 | 12.1.1 | 12.1.2
- big-ip_application_acceleration_manager11.6.0 | 11.6.1 | 12.0.0 | 12.1.0 | 12.1.1 | 12.1.2
- big-ip_application_security_manager11.6.0 | 11.6.1 | 12.0.0 | 12.1.0 | 12.1.1 | 12.1.2
- big-ip_link_controller11.6.0 | 11.6.1 | 12.0.0 | 12.1.0 | 12.1.1 | 12.1.2
F5 networks, inc.1 product
- big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafe12.0.0 - 12.1.2 | 11.6.0 â | € | " 11.6.1
2 vendors · 9 products