cbcvebase.
CVE-2017-6148
published 2018-04-13

CVE-2017-6148: Responses to SOCKS proxy requests made through F5 BIG-IP version 13.0.0, 12.0.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5 may cause a disruption of services…

high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
Responses to SOCKS proxy requests made through F5 BIG-IP version 13.0.0, 12.0.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5 may cause a disruption of services provided by TMM. The data plane is impacted and exposed only when a SOCKS proxy profile is attached to a Virtual Server. The control plane is not impacted by this vulnerability.

Affected

40 ranges· showing 25
VendorProductVersion rangeFixed in
f5big-ip_aam
f5big-ip_access_policy_manager
f5big-ip_access_policy_manager11.5.1 – 11.5.5
f5big-ip_access_policy_manager11.6.1 – 11.6.2
f5big-ip_access_policy_manager12.0.0 – 12.1.3
f5big-ip_advanced_firewall_manager
f5big-ip_advanced_firewall_manager11.5.1 – 11.5.5
f5big-ip_advanced_firewall_manager11.6.1 – 11.6.2
f5big-ip_advanced_firewall_manager12.0.0 – 12.1.3
f5big-ip_afm
f5big-ip_apm
f5big-ip_application_acceleration_manager
f5big-ip_application_acceleration_manager11.5.1 – 11.5.5
f5big-ip_application_acceleration_manager11.6.1 – 11.6.2
f5big-ip_application_acceleration_manager12.0.0 – 12.1.3
f5big-ip_application_security_manager
f5big-ip_application_security_manager11.5.1 – 11.5.5
f5big-ip_application_security_manager11.6.1 – 11.6.2
f5big-ip_application_security_manager12.0.0 – 12.1.3
f5big-ip_asm
f5big-ip_link_controller
f5big-ip_link_controller
f5big-ip_link_controller11.5.1 – 11.5.5
f5big-ip_link_controller11.6.1 – 11.6.2
f5big-ip_link_controller12.0.0 – 12.1.3