Remote Service Disruption Vulnerability in F5 BIG-IP by F5 Networks
CVE-2016-7468

5.9MEDIUM

Key Information:

Vendor

F5 Networks

Status
F5 Big-ip Ltm, Aam, Afm, Analytics, Apm, Asm, Link Controller, Pem, Psm,
Vendor
CVE Published:
23 March 2017

What is CVE-2016-7468?

An unauthenticated remote attacker can exploit a vulnerability in F5 BIG-IP devices (versions 11.4.1 to 11.5.4) by sending specially crafted network traffic. This issue predominantly affects virtual servers linked to TCP profiles when the tm.tcpprogressive database variable is configured to 'enabled', deviating from its default setting of 'negotiate'. Exploitation could lead to traffic disruption or potentially trigger a failover to another device within the group, impacting service continuity.

Affected Version(s)

F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, PEM, PSM, 11.4.1 - 11.5.4

References

http://www.securityfocus.com/bid/97119
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1038121
vdb-entryx_refsource_SECTRACK
https://support.f5.com/csp/article/K13053402
x_refsource_CONFIRM

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.