cnvd - cnvd-2017-34621

cnvd-2017-34621

Vulnerability from cnvd

Title: 多款F5产品拒绝服务漏洞（CNVD-2017-34621）

Description:

F5 BIG-IP Analytics等都是美国F5公司的产品。F5 BIG-IP Analytics是一套Web应用程序性能分析软件。APM是一套提供安全统一访问关键业务应用和网络的解决方案。LTM是一款本地流量管理器。

多款F5产品存在安全漏洞。攻击者可借助一系列请求利用该漏洞造成拒绝服务（Traffic Management Microkernel重启和流量中断）。

Severity: 中

Patch Name: 多款F5产品拒绝服务漏洞（CNVD-2017-34621）的补丁

Patch Description:

多款F5产品存在安全漏洞。攻击者可借助一系列请求利用该漏洞造成拒绝服务（Traffic Management Microkernel重启和流量中断）。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://support.f5.com/csp/article/K43945001

Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-6147

Impacted products

Name
['F5 Enterprise Manager', 'F5 ARX', 'F5 BIG-IP Edge Gateway', 'F5 BIG-IP WebAccelerator', 'F5 BIG-IQ Device', 'F5 BIG-IQ Cloud', 'F5 Traffix SDC', 'F5 LineRate', 'F5 BIG-IQ Security', 'F5 BIG-IQ ADC', 'F5 BIG-IQ Centralized Management', 'F5 BIG-IQ Cloud and Orchestration', 'F5 BIG-IP GTM', 'F5 BIG-IP PSM', 'F5 F5 iWorkflow', 'F5 BIG-IP APM 13.0.0', 'F5 BIG-IP WebSafe 13.0.0', 'F5 BIG-IP Link Controller 13.0.0', 'F5 BIG-IP LTM 13.0.0', 'F5 BIG-IP AFM 13.0.0', 'F5 BIG-IP ASM 13.0.0', 'F5 BIG-IP DNS 13.0.0', 'F5 BIG-IP WebSafe 12.1.2 HF1', 'F5 BIG-IP PEM 13.0.0', 'F5 BIG-IP PEM 12.1.2 HF1', 'F5 BIG-IP Link Controller 12.1.2 HF1', 'F5 BIG-IP DNS 12.1.2 HF1', 'F5 BIG-IP ASM 12.1.2 HF1', 'F5 BIG-IP APM 12.1.2 HF1', 'F5 BIG-IP Analytics 12.1.2 HF1', 'F5 BIG-IP Analytics 13.0.0', 'F5 BIG-IP AFM 12.1.2 HF1', 'F5 BIG-IP AAM 12.1.2 HF1', 'F5 BIG-IP LTM 12.1.2 HF1']

Name

['F5 Enterprise Manager', 'F5 ARX', 'F5 BIG-IP Edge Gateway', 'F5 BIG-IP WebAccelerator', 'F5 BIG-IQ Device', 'F5 BIG-IQ Cloud', 'F5 Traffix SDC', 'F5 LineRate', 'F5 BIG-IQ Security', 'F5 BIG-IQ ADC', 'F5 BIG-IQ Centralized Management', 'F5 BIG-IQ Cloud and Orchestration', 'F5 BIG-IP GTM', 'F5 BIG-IP PSM', 'F5 F5 iWorkflow', 'F5 BIG-IP APM 13.0.0', 'F5 BIG-IP WebSafe 13.0.0', 'F5 BIG-IP Link Controller 13.0.0', 'F5 BIG-IP LTM 13.0.0', 'F5 BIG-IP AFM 13.0.0', 'F5 BIG-IP ASM 13.0.0', 'F5 BIG-IP DNS 13.0.0', 'F5 BIG-IP WebSafe 12.1.2 HF1', 'F5 BIG-IP PEM 13.0.0', 'F5 BIG-IP PEM 12.1.2 HF1', 'F5 BIG-IP Link Controller 12.1.2 HF1', 'F5 BIG-IP DNS 12.1.2 HF1', 'F5 BIG-IP ASM 12.1.2 HF1', 'F5 BIG-IP APM 12.1.2 HF1', 'F5 BIG-IP Analytics 12.1.2 HF1', 'F5 BIG-IP Analytics 13.0.0', 'F5 BIG-IP AFM 12.1.2 HF1', 'F5 BIG-IP AAM 12.1.2 HF1', 'F5 BIG-IP LTM 12.1.2 HF1']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "100981"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-6147"
    }
  },
  "description": "F5 BIG-IP Analytics\u7b49\u90fd\u662f\u7f8e\u56fdF5\u516c\u53f8\u7684\u4ea7\u54c1\u3002F5 BIG-IP Analytics\u662f\u4e00\u5957Web\u5e94\u7528\u7a0b\u5e8f\u6027\u80fd\u5206\u6790\u8f6f\u4ef6\u3002APM\u662f\u4e00\u5957\u63d0\u4f9b\u5b89\u5168\u7edf\u4e00\u8bbf\u95ee\u5173\u952e\u4e1a\u52a1\u5e94\u7528\u548c\u7f51\u7edc\u7684\u89e3\u51b3\u65b9\u6848\u3002LTM\u662f\u4e00\u6b3e\u672c\u5730\u6d41\u91cf\u7ba1\u7406\u5668\u3002\r\n\r\n\u591a\u6b3eF5\u4ea7\u54c1\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u501f\u52a9\u4e00\u7cfb\u5217\u8bf7\u6c42\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08Traffic Management Microkernel\u91cd\u542f\u548c\u6d41\u91cf\u4e2d\u65ad\uff09\u3002",
  "discovererName": "F5",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://support.f5.com/csp/article/K43945001",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-34621",
  "openTime": "2017-11-20",
  "patchDescription": "F5 BIG-IP Analytics\u7b49\u90fd\u662f\u7f8e\u56fdF5\u516c\u53f8\u7684\u4ea7\u54c1\u3002F5 BIG-IP Analytics\u662f\u4e00\u5957Web\u5e94\u7528\u7a0b\u5e8f\u6027\u80fd\u5206\u6790\u8f6f\u4ef6\u3002APM\u662f\u4e00\u5957\u63d0\u4f9b\u5b89\u5168\u7edf\u4e00\u8bbf\u95ee\u5173\u952e\u4e1a\u52a1\u5e94\u7528\u548c\u7f51\u7edc\u7684\u89e3\u51b3\u65b9\u6848\u3002LTM\u662f\u4e00\u6b3e\u672c\u5730\u6d41\u91cf\u7ba1\u7406\u5668\u3002\r\n\r\n\u591a\u6b3eF5\u4ea7\u54c1\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u501f\u52a9\u4e00\u7cfb\u5217\u8bf7\u6c42\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08Traffic Management Microkernel\u91cd\u542f\u548c\u6d41\u91cf\u4e2d\u65ad\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eF5\u4ea7\u54c1\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2017-34621\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "F5 Enterprise Manager",
      "F5 ARX",
      "F5 BIG-IP Edge Gateway",
      "F5 BIG-IP WebAccelerator",
      "F5 BIG-IQ Device",
      "F5 BIG-IQ Cloud",
      "F5 Traffix SDC",
      "F5 LineRate",
      "F5 BIG-IQ Security",
      "F5 BIG-IQ ADC",
      "F5 BIG-IQ Centralized Management",
      "F5 BIG-IQ Cloud and Orchestration",
      "F5 BIG-IP GTM",
      "F5 BIG-IP PSM",
      "F5 F5 iWorkflow",
      "F5 BIG-IP APM 13.0.0",
      "F5 BIG-IP WebSafe 13.0.0",
      "F5 BIG-IP Link Controller 13.0.0",
      "F5 BIG-IP LTM 13.0.0",
      "F5 BIG-IP AFM 13.0.0",
      "F5 BIG-IP ASM 13.0.0",
      "F5 BIG-IP DNS 13.0.0",
      "F5 BIG-IP WebSafe 12.1.2 HF1",
      "F5 BIG-IP PEM 13.0.0",
      "F5 BIG-IP PEM 12.1.2 HF1",
      "F5 BIG-IP Link Controller 12.1.2 HF1",
      "F5 BIG-IP DNS 12.1.2 HF1",
      "F5 BIG-IP ASM 12.1.2 HF1",
      "F5 BIG-IP APM 12.1.2 HF1",
      "F5 BIG-IP Analytics 12.1.2 HF1",
      "F5 BIG-IP Analytics 13.0.0",
      "F5 BIG-IP AFM 12.1.2 HF1",
      "F5 BIG-IP AAM 12.1.2 HF1",
      "F5 BIG-IP LTM 12.1.2 HF1"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2017-6147",
  "serverity": "\u4e2d",
  "submitTime": "2017-09-20",
  "title": "\u591a\u6b3eF5\u4ea7\u54c1\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2017-34621\uff09"
}

CVE-2017-6147 (GCVE-0-2017-6147)

Vulnerability from cvelistv5

Published

2017-09-18 17:00

Modified

2024-09-17 02:15

Severity ?

CWE

TMM SSL Forward Proxy

Summary

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of service when "SSL Forward Proxy" setting is enabled in both the Client and Server SSL profiles assigned to a BIG-IP Virtual Server.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/100981	vdb-entry, x_refsource_BID
	https://support.f5.com/csp/article/K43945001	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	F5 Networks, Inc.	F5 BIG-IP	Version: v13.0.0, v12.1.2-HF1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:18:49.697Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "100981",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/100981"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K43945001"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "F5 BIG-IP",
          "vendor": "F5 Networks, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "v13.0.0, v12.1.2-HF1"
            }
          ]
        }
      ],
      "datePublic": "2017-09-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of service when \"SSL Forward Proxy\" setting is enabled in both the Client and Server SSL profiles assigned to a BIG-IP Virtual Server."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "TMM SSL Forward Proxy",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-26T09:57:01",
        "orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
        "shortName": "f5"
      },
      "references": [
        {
          "name": "100981",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/100981"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K43945001"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "f5sirt@f5.com",
          "DATE_PUBLIC": "2017-09-18T00:00:00",
          "ID": "CVE-2017-6147",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "F5 BIG-IP",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "v13.0.0, v12.1.2-HF1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "F5 Networks, Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of service when \"SSL Forward Proxy\" setting is enabled in both the Client and Server SSL profiles assigned to a BIG-IP Virtual Server."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "TMM SSL Forward Proxy"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "100981",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/100981"
            },
            {
              "name": "https://support.f5.com/csp/article/K43945001",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K43945001"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
    "assignerShortName": "f5",
    "cveId": "CVE-2017-6147",
    "datePublished": "2017-09-18T17:00:00Z",
    "dateReserved": "2017-02-21T00:00:00",
    "dateUpdated": "2024-09-17T02:15:57.177Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted