CVE-2017-6164

Name of the Vulnerable Software and Affected Versions F5 BIG-IP software versions 11.5.0 through 11.5.4 F5 BIG-IP software versions 11.6.0 through 11.6.1 F5 BIG-IP software versions 12.0.0 through 12.1.2 F5 BIG-IP software version 13.0.0

Description The issue arises from the Traffic Management Microkernel (TMM) not properly handling certain malformed TLS1.2 records. This can be exploited by remote attackers to cause a denial-of-service (DoS) or possibly achieve remote command execution on the BIG-IP system.

Recommendations For F5 BIG-IP software versions 11.5.0 through 11.5.4, update to a version that properly handles TLS1.2 records to prevent exploitation. For F5 BIG-IP software versions 11.6.0 through 11.6.1, update to a version that properly handles TLS1.2 records to prevent exploitation. For F5 BIG-IP software versions 12.0.0 through 12.1.2, update to a version that properly handles TLS1.2 records to prevent exploitation. For F5 BIG-IP software version 13.0.0, update to a version that properly handles TLS1.2 records to prevent exploitation.