CVE-2017-6137 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2017-6137

Deferred

More Info Official Page

Source-f5sirt@f5.com

Published At-09 May, 2017 | 15:29

Updated At-20 Apr, 2025 | 01:37

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2, undisclosed traffic patterns received while software SYN cookie protection is engaged may cause a disruption of service to the Traffic Management Microkernel (TMM) on specific platforms and configurations.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	5.9	MEDIUM	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:N/A:P

Type: Primary

Version: 3.0

Base score: 5.9

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 4.3

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:N/I:N/A:P

CPE Matches

>>big-ip_local_traffic_manager>>11.6.1

cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1:*:*:*:*:*:*:*

>>big-ip_local_traffic_manager>>12.0.0

cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*

>>big-ip_local_traffic_manager>>12.1.0

cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0:*:*:*:*:*:*:*

>>big-ip_local_traffic_manager>>12.1.1

cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.1:*:*:*:*:*:*:*

>>big-ip_local_traffic_manager>>12.1.2

cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.2:*:*:*:*:*:*:*

>>big-ip_application_acceleration_manager>>11.6.1

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1:*:*:*:*:*:*:*

>>big-ip_application_acceleration_manager>>12.0.0

cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*

>>big-ip_application_acceleration_manager>>12.1.0

cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*

>>big-ip_application_acceleration_manager>>12.1.1

cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.1:*:*:*:*:*:*:*

>>big-ip_application_acceleration_manager>>12.1.2

cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.2:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>11.6.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.1:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>12.0.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>12.1.0

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>12.1.1

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.1:*:*:*:*:*:*:*

>>big-ip_advanced_firewall_manager>>12.1.2

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.2:*:*:*:*:*:*:*

>>big-ip_analytics>>11.6.1

cpe:2.3:a:f5:big-ip_analytics:11.6.1:*:*:*:*:*:*:*

>>big-ip_analytics>>12.0.0

cpe:2.3:a:f5:big-ip_analytics:12.0.0:*:*:*:*:*:*:*

>>big-ip_analytics>>12.1.0

cpe:2.3:a:f5:big-ip_analytics:12.1.0:*:*:*:*:*:*:*

>>big-ip_analytics>>12.1.1

cpe:2.3:a:f5:big-ip_analytics:12.1.1:*:*:*:*:*:*:*

>>big-ip_analytics>>12.1.2

cpe:2.3:a:f5:big-ip_analytics:12.1.2:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>11.6.1

cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>12.0.0

cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>12.1.0

cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>12.1.1

cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.1:*:*:*:*:*:*:*

>>big-ip_access_policy_manager>>12.1.2

cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.2:*:*:*:*:*:*:*

>>big-ip_application_security_manager>>11.6.1

cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1:*:*:*:*:*:*:*

>>big-ip_application_security_manager>>12.0.0

cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*

>>big-ip_application_security_manager>>12.1.0

cpe:2.3:a:f5:big-ip_application_security_manager:12.1.0:*:*:*:*:*:*:*

>>big-ip_application_security_manager>>12.1.1

cpe:2.3:a:f5:big-ip_application_security_manager:12.1.1:*:*:*:*:*:*:*

>>big-ip_application_security_manager>>12.1.2

cpe:2.3:a:f5:big-ip_application_security_manager:12.1.2:*:*:*:*:*:*:*

>>big-ip_domain_name_system>>12.0.0

cpe:2.3:a:f5:big-ip_domain_name_system:12.0.0:*:*:*:*:*:*:*

>>big-ip_domain_name_system>>12.1.0

cpe:2.3:a:f5:big-ip_domain_name_system:12.1.0:*:*:*:*:*:*:*

>>big-ip_domain_name_system>>12.1.1

cpe:2.3:a:f5:big-ip_domain_name_system:12.1.1:*:*:*:*:*:*:*

>>big-ip_domain_name_system>>12.1.2

cpe:2.3:a:f5:big-ip_domain_name_system:12.1.2:*:*:*:*:*:*:*

>>big-ip_global_traffic_manager>>11.6.1

cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.1:*:*:*:*:*:*:*

>>big-ip_link_controller>>11.6.1

cpe:2.3:a:f5:big-ip_link_controller:11.6.1:*:*:*:*:*:*:*

>>big-ip_link_controller>>12.0.0

cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*

>>big-ip_link_controller>>12.1.0

cpe:2.3:a:f5:big-ip_link_controller:12.1.0:*:*:*:*:*:*:*

>>big-ip_link_controller>>12.1.1

cpe:2.3:a:f5:big-ip_link_controller:12.1.1:*:*:*:*:*:*:*

>>big-ip_link_controller>>12.1.2

cpe:2.3:a:f5:big-ip_link_controller:12.1.2:*:*:*:*:*:*:*

>>big-ip_policy_enforcement_manager>>11.6.1

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1:*:*:*:*:*:*:*

>>big-ip_policy_enforcement_manager>>12.0.0

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*

>>big-ip_policy_enforcement_manager>>12.1.0

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*

>>big-ip_policy_enforcement_manager>>12.1.1

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.1:*:*:*:*:*:*:*

>>big-ip_policy_enforcement_manager>>12.1.2

cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.2:*:*:*:*:*:*:*

>>big-ip_websafe>>11.6.1

cpe:2.3:a:f5:big-ip_websafe:11.6.1:*:*:*:*:*:*:*

>>big-ip_websafe>>12.0.0

cpe:2.3:a:f5:big-ip_websafe:12.0.0:*:*:*:*:*:*:*

>>big-ip_websafe>>12.1.0

cpe:2.3:a:f5:big-ip_websafe:12.1.0:*:*:*:*:*:*:*

>>big-ip_websafe>>12.1.1

cpe:2.3:a:f5:big-ip_websafe:12.1.1:*:*:*:*:*:*:*

>>big-ip_websafe>>12.1.2

cpe:2.3:a:f5:big-ip_websafe:12.1.2:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securitytracker.com/id/1038409	f5sirt@f5.com	N/A
https://support.f5.com/csp/article/K82851041	f5sirt@f5.com	Vendor Advisory
http://www.securitytracker.com/id/1038409	af854a3a-2127-422b-91ae-364da2661108	N/A
https://support.f5.com/csp/article/K82851041	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory

Hyperlink: http://www.securitytracker.com/id/1038409

Source: f5sirt@f5.com

Resource: N/A

Hyperlink: https://support.f5.com/csp/article/K82851041

Source: f5sirt@f5.com

Resource:

Vendor Advisory

Hyperlink: http://www.securitytracker.com/id/1038409

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://support.f5.com/csp/article/K82851041

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory