CVE-2017-6136

Name of the Vulnerable Software and Affected Versions F5 BIG-IP software versions 12.0.0 through 12.1.2 F5 BIG-IP software version 13.0.0

Description The issue affects F5 BIG-IP when undisclosed traffic patterns are sent to BIG-IP virtual servers with specific TCP profile settings enabled, potentially causing a disruption of service to the Traffic Management Microkernel (TMM). This occurs when the TCP Fast Open and Tail Loss Probe options are enabled in the associated TCP profile.

Recommendations For F5 BIG-IP software versions 12.0.0 through 12.1.2, consider disabling the TCP Fast Open and Tail Loss Probe options in the associated TCP profile as a temporary workaround until a patch is available. For F5 BIG-IP software version 13.0.0, consider disabling the TCP Fast Open and Tail Loss Probe options in the associated TCP profile as a temporary workaround until a patch is available.