CVE-2017-6140

Name of the Vulnerable Software and Affected Versions BIG-IP versions 11.5.0 through 11.5.4 BIG-IP versions 11.6.0 through 11.6.1 BIG-IP versions 12.0.0 through 12.1.2

Description An undisclosed sequence of packets sent to Virtual Servers with client or server SSL profiles may cause disruption of data plane services on certain BIG-IP devices.

Recommendations For versions 11.5.0 through 11.5.4, consider restricting access to Virtual Servers with client or server SSL profiles until a fix is available. For versions 11.6.0 through 11.6.1, consider disabling SSL profiles on Virtual Servers to minimize the risk of disruption. For versions 12.0.0 through 12.1.2, restrict the use of Virtual Servers with client or server SSL profiles to prevent data plane services disruption.