cnvd - cnvd-2017-35577

cnvd-2017-35577

Vulnerability from cnvd

Title: F5 BIG-IP拒绝服务漏洞（CNVD-2017-35577）

Description:

F5 BIG-IP LTM等都是美国F5公司的产品。F5 BIG-IP LTM是一款本地流量管理器；BIG-IP AAM是一款应用程序加速管理器。

多款F5产品中存在安全漏洞。攻击者可利用该漏洞绕过TLS保护，造成拒绝服务（资源耗尽）。

Severity: 低

Patch Name: F5 BIG-IP拒绝服务漏洞（CNVD-2017-35577）的补丁

Patch Description:

F5 BIG-IP LTM等都是美国F5公司的产品。F5 BIG-IP LTM是一款本地流量管理器；BIG-IP AAM是一款应用程序加速管理器。

多款F5产品中存在安全漏洞。攻击者可利用该漏洞绕过TLS保护，造成拒绝服务（资源耗尽）。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布漏洞修复程序，请及时关注更新： https://support.f5.com/csp/article/K62279530

Reference: https://support.f5.com/csp/article/K62279530

Impacted products

Name
['F5 BIG-IP LTM 11.2.1', 'F5 BIG-IP Analytics 11.2.1', 'F5 BIG-IP APM 11.2.1', 'F5 BIG-IP ASM 11.2.1', 'F5 BIG-IP Edge Gateway 11.2.1', 'F5 BIG-IP GTM 11.2.1', 'F5 BIG-IP Link Controller 11.2.1', 'F5 BIG-IP WebAccelerator 11.2.1', 'F5 BIG-IP LTM >=11.6.0，<=11.6.1', 'F5 BIG-IP AAM >=11.6.0，<=11.6.1', 'F5 BIG-IP AFM >=11.6.0，<=11.6.1', 'F5 BIG-IP Analytics >=11.6.0，<=11.6.1', 'F5 BIG-IP APM >=11.6.0，<=11.6.1', 'F5 BIG-IP ASM >=11.6.0，<=11.6.1', 'F5 BIG-IP GTM >=11.6.0，<=11.6.1', 'F5 BIG-IP Link Controller >=11.6.0，<=11.6.1', 'F5 BIG-IP PEM >=11.6.0，<=11.6.1', 'F5 BIG-IP LTM >=11.4.0，<=11.5.4', 'F5 BIG-IP AAM >=11.4.0，<=11.5.4', 'F5 BIG-IP APM >=11.4.0，<=11.5.4', 'F5 BIG-IP ASM >=11.4.0，<=11.5.4', 'F5 BIG-IP Link Controller >=11.4.0，<=11.5.4', 'F5 BIG-IP PEM >=11.4.0，<=11.5.4', 'F5 BIG-IP LTM <=12.0.0，<=12.1.2', 'F5 BIG-IP AAM <=12.0.0，<=12.1.2', 'F5 BIG-IP AFM <=12.0.0，<=12.1.2', 'F5 BIG-IP Analytics <=12.0.0，<=12.1.2', 'F5 BIG-IP APM <=12.0.0，<=12.1.2', 'F5 BIG-IP ASM <=12.0.0，<=12.1.2', 'F5 BIG-IP DNS <=12.0.0，<=12.1.2', 'F5 BIG-IP GTM <=12.0.0，<=12.1.2', 'F5 BIG-IP Link Controller <=12.0.0，<=12.1.2', 'F5 BIG-IP PEM <=12.0.0，<=12.1.2', 'F5 BIG-IP DNS >=11.6.0，<=11.6.1', 'F5 BIG-IP AAM 11.2.1', 'F5 BIG-IP AFM >=11.4.0，<=11.5.4', 'F5 BIG-IP AFM 11.2.1', 'F5 BIG-IP Analytics >=11.4.0，<=11.5.4', 'F5 BIG-IP DNS >=11.4.0，<=11.5.4', 'F5 BIG-IP DNS 11.2.1', 'F5 BIG-IP Edge Gateway >=12.0.0，<=12.1.2', 'F5 BIG-IP Edge Gateway >=11.6.0，<=11.6.1', 'F5 BIG-IP Edge Gateway >=11.4.0，<=11.5.4', 'F5 BIG-IP GTM >=11.4.0，<=11.5.4', 'F5 BIG-IP PEM 11.2.1', 'F5 BIG-IP WebAccelerator >=12.0.0，<=12.1.2', 'F5 BIG-IP WebAccelerator >=11.6.0，<=11.6.1', 'F5 BIG-IP WebAccelerator >=11.4.0，<=11.5.4']

Name

['F5 BIG-IP LTM 11.2.1', 'F5 BIG-IP Analytics 11.2.1', 'F5 BIG-IP APM 11.2.1', 'F5 BIG-IP ASM 11.2.1', 'F5 BIG-IP Edge Gateway 11.2.1', 'F5 BIG-IP GTM 11.2.1', 'F5 BIG-IP Link Controller 11.2.1', 'F5 BIG-IP WebAccelerator 11.2.1', 'F5 BIG-IP LTM >=11.6.0，<=11.6.1', 'F5 BIG-IP AAM >=11.6.0，<=11.6.1', 'F5 BIG-IP AFM >=11.6.0，<=11.6.1', 'F5 BIG-IP Analytics >=11.6.0，<=11.6.1', 'F5 BIG-IP APM >=11.6.0，<=11.6.1', 'F5 BIG-IP ASM >=11.6.0，<=11.6.1', 'F5 BIG-IP GTM >=11.6.0，<=11.6.1', 'F5 BIG-IP Link Controller >=11.6.0，<=11.6.1', 'F5 BIG-IP PEM >=11.6.0，<=11.6.1', 'F5 BIG-IP LTM >=11.4.0，<=11.5.4', 'F5 BIG-IP AAM >=11.4.0，<=11.5.4', 'F5 BIG-IP APM >=11.4.0，<=11.5.4', 'F5 BIG-IP ASM >=11.4.0，<=11.5.4', 'F5 BIG-IP Link Controller >=11.4.0，<=11.5.4', 'F5 BIG-IP PEM >=11.4.0，<=11.5.4', 'F5 BIG-IP LTM <=12.0.0，<=12.1.2', 'F5 BIG-IP AAM <=12.0.0，<=12.1.2', 'F5 BIG-IP AFM <=12.0.0，<=12.1.2', 'F5 BIG-IP Analytics <=12.0.0，<=12.1.2', 'F5 BIG-IP APM <=12.0.0，<=12.1.2', 'F5 BIG-IP ASM <=12.0.0，<=12.1.2', 'F5 BIG-IP DNS <=12.0.0，<=12.1.2', 'F5 BIG-IP GTM <=12.0.0，<=12.1.2', 'F5 BIG-IP Link Controller <=12.0.0，<=12.1.2', 'F5 BIG-IP PEM <=12.0.0，<=12.1.2', 'F5 BIG-IP DNS >=11.6.0，<=11.6.1', 'F5 BIG-IP AAM 11.2.1', 'F5 BIG-IP AFM >=11.4.0，<=11.5.4', 'F5 BIG-IP AFM 11.2.1', 'F5 BIG-IP Analytics >=11.4.0，<=11.5.4', 'F5 BIG-IP DNS >=11.4.0，<=11.5.4', 'F5 BIG-IP DNS 11.2.1', 'F5 BIG-IP Edge Gateway >=12.0.0，<=12.1.2', 'F5 BIG-IP Edge Gateway >=11.6.0，<=11.6.1', 'F5 BIG-IP Edge Gateway >=11.4.0，<=11.5.4', 'F5 BIG-IP GTM >=11.4.0，<=11.5.4', 'F5 BIG-IP PEM 11.2.1', 'F5 BIG-IP WebAccelerator >=12.0.0，<=12.1.2', 'F5 BIG-IP WebAccelerator >=11.6.0，<=11.6.1', 'F5 BIG-IP WebAccelerator >=11.4.0，<=11.5.4']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-6161"
    }
  },
  "description": "F5 BIG-IP LTM\u7b49\u90fd\u662f\u7f8e\u56fdF5\u516c\u53f8\u7684\u4ea7\u54c1\u3002F5 BIG-IP LTM\u662f\u4e00\u6b3e\u672c\u5730\u6d41\u91cf\u7ba1\u7406\u5668\uff1bBIG-IP AAM\u662f\u4e00\u6b3e\u5e94\u7528\u7a0b\u5e8f\u52a0\u901f\u7ba1\u7406\u5668\u3002\r\n\r\n\u591a\u6b3eF5\u4ea7\u54c1\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7TLS\u4fdd\u62a4\uff0c\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u8d44\u6e90\u8017\u5c3d\uff09\u3002",
  "discovererName": "unknown",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://support.f5.com/csp/article/K62279530",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-35577",
  "openTime": "2017-11-30",
  "patchDescription": "F5 BIG-IP LTM\u7b49\u90fd\u662f\u7f8e\u56fdF5\u516c\u53f8\u7684\u4ea7\u54c1\u3002F5 BIG-IP LTM\u662f\u4e00\u6b3e\u672c\u5730\u6d41\u91cf\u7ba1\u7406\u5668\uff1bBIG-IP AAM\u662f\u4e00\u6b3e\u5e94\u7528\u7a0b\u5e8f\u52a0\u901f\u7ba1\u7406\u5668\u3002\r\n\r\n\u591a\u6b3eF5\u4ea7\u54c1\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7TLS\u4fdd\u62a4\uff0c\u9020\u6210\u62d2\u7edd\u670d\u52a1\uff08\u8d44\u6e90\u8017\u5c3d\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "F5 BIG-IP\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2017-35577\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "F5 BIG-IP LTM 11.2.1",
      "F5 BIG-IP Analytics 11.2.1",
      "F5 BIG-IP APM 11.2.1",
      "F5 BIG-IP ASM 11.2.1",
      "F5 BIG-IP Edge Gateway 11.2.1",
      "F5 BIG-IP GTM 11.2.1",
      "F5 BIG-IP Link Controller 11.2.1",
      "F5 BIG-IP WebAccelerator 11.2.1",
      "F5 BIG-IP LTM \u003e=11.6.0\uff0c\u003c=11.6.1",
      "F5 BIG-IP AAM  \u003e=11.6.0\uff0c\u003c=11.6.1",
      "F5 BIG-IP AFM  \u003e=11.6.0\uff0c\u003c=11.6.1",
      "F5 BIG-IP Analytics  \u003e=11.6.0\uff0c\u003c=11.6.1",
      "F5 BIG-IP APM  \u003e=11.6.0\uff0c\u003c=11.6.1",
      "F5 BIG-IP ASM  \u003e=11.6.0\uff0c\u003c=11.6.1",
      "F5 BIG-IP GTM  \u003e=11.6.0\uff0c\u003c=11.6.1",
      "F5 BIG-IP Link Controller  \u003e=11.6.0\uff0c\u003c=11.6.1",
      "F5 BIG-IP PEM  \u003e=11.6.0\uff0c\u003c=11.6.1",
      "F5 BIG-IP LTM \u003e=11.4.0\uff0c\u003c=11.5.4",
      "F5 BIG-IP AAM \u003e=11.4.0\uff0c\u003c=11.5.4",
      "F5 BIG-IP APM \u003e=11.4.0\uff0c\u003c=11.5.4",
      "F5 BIG-IP ASM \u003e=11.4.0\uff0c\u003c=11.5.4",
      "F5 BIG-IP Link Controller \u003e=11.4.0\uff0c\u003c=11.5.4",
      "F5 BIG-IP PEM \u003e=11.4.0\uff0c\u003c=11.5.4",
      "F5 BIG-IP LTM \u003c=12.0.0\uff0c\u003c=12.1.2",
      "F5 BIG-IP AAM \u003c=12.0.0\uff0c\u003c=12.1.2",
      "F5 BIG-IP AFM \u003c=12.0.0\uff0c\u003c=12.1.2",
      "F5 BIG-IP Analytics \u003c=12.0.0\uff0c\u003c=12.1.2",
      "F5 BIG-IP APM \u003c=12.0.0\uff0c\u003c=12.1.2",
      "F5 BIG-IP ASM \u003c=12.0.0\uff0c\u003c=12.1.2",
      "F5 BIG-IP DNS \u003c=12.0.0\uff0c\u003c=12.1.2",
      "F5 BIG-IP GTM \u003c=12.0.0\uff0c\u003c=12.1.2",
      "F5 BIG-IP Link Controller \u003c=12.0.0\uff0c\u003c=12.1.2",
      "F5 BIG-IP PEM \u003c=12.0.0\uff0c\u003c=12.1.2",
      "F5 BIG-IP DNS \u003e=11.6.0\uff0c\u003c=11.6.1",
      "F5 BIG-IP AAM 11.2.1",
      "F5 BIG-IP AFM \u003e=11.4.0\uff0c\u003c=11.5.4",
      "F5 BIG-IP AFM 11.2.1",
      "F5 BIG-IP Analytics \u003e=11.4.0\uff0c\u003c=11.5.4",
      "F5 BIG-IP DNS \u003e=11.4.0\uff0c\u003c=11.5.4",
      "F5 BIG-IP DNS 11.2.1",
      "F5 BIG-IP Edge Gateway \u003e=12.0.0\uff0c\u003c=12.1.2",
      "F5 BIG-IP Edge Gateway \u003e=11.6.0\uff0c\u003c=11.6.1",
      "F5 BIG-IP Edge Gateway \u003e=11.4.0\uff0c\u003c=11.5.4",
      "F5 BIG-IP GTM \u003e=11.4.0\uff0c\u003c=11.5.4",
      "F5 BIG-IP PEM 11.2.1",
      "F5 BIG-IP WebAccelerator \u003e=12.0.0\uff0c\u003c=12.1.2",
      "F5 BIG-IP WebAccelerator \u003e=11.6.0\uff0c\u003c=11.6.1",
      "F5 BIG-IP WebAccelerator \u003e=11.4.0\uff0c\u003c=11.5.4"
    ]
  },
  "referenceLink": "https://support.f5.com/csp/article/K62279530",
  "serverity": "\u4f4e",
  "submitTime": "2017-10-30",
  "title": "F5 BIG-IP\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2017-35577\uff09"
}

CVE-2017-6161 (GCVE-0-2017-6161)

Vulnerability from cvelistv5

Published

2017-10-27 14:00

Modified

2024-09-16 20:31

Severity ?

CWE

denial of service

Summary

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1, when ConfigSync is configured, attackers on adjacent networks may be able to bypass the TLS protections usually used to encrypted and authenticate connections to mcpd. This vulnerability may allow remote attackers to cause a denial-of-service (DoS) attack via resource exhaustion.

References

▼	URL	Tags
	https://support.f5.com/csp/article/K62279530	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1039676	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/101636	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1039675	vdb-entry, x_refsource_SECTRACK

Impacted products

	Vendor	Product	Version
	F5 Networks, Inc.	BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator	Version: 12.0.0 - 12.1.2 Version: 11.6.0 &#xe2 Version: &#x80 Version: " 11.6.1 Version: 11.4.0 &#xe2 Version: " 11.5.4 Version: 11.2.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:18:49.774Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K62279530"
          },
          {
            "name": "1039676",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039676"
          },
          {
            "name": "101636",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/101636"
          },
          {
            "name": "1039675",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039675"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator",
          "vendor": "F5 Networks, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "12.0.0 - 12.1.2"
            },
            {
              "status": "affected",
              "version": "11.6.0 \u0026#xe2"
            },
            {
              "status": "affected",
              "version": "\u0026#x80"
            },
            {
              "status": "affected",
              "version": "\" 11.6.1"
            },
            {
              "status": "affected",
              "version": "11.4.0 \u0026#xe2"
            },
            {
              "status": "affected",
              "version": "\" 11.5.4"
            },
            {
              "status": "affected",
              "version": "11.2.1"
            }
          ]
        }
      ],
      "datePublic": "2017-10-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1, when ConfigSync is configured, attackers on adjacent networks may be able to bypass the TLS protections usually used to encrypted and authenticate connections to mcpd. This vulnerability may allow remote attackers to cause a denial-of-service (DoS) attack via resource exhaustion."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "denial of service",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-02T09:57:01",
        "orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
        "shortName": "f5"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K62279530"
        },
        {
          "name": "1039676",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039676"
        },
        {
          "name": "101636",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/101636"
        },
        {
          "name": "1039675",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039675"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "f5sirt@f5.com",
          "DATE_PUBLIC": "2017-10-26T00:00:00",
          "ID": "CVE-2017-6161",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "12.0.0 - 12.1.2"
                          },
                          {
                            "version_value": "11.6.0 \u0026#xe2"
                          },
                          {
                            "version_value": "\u0026#x80"
                          },
                          {
                            "version_value": "\" 11.6.1"
                          },
                          {
                            "version_value": "11.4.0 \u0026#xe2"
                          },
                          {
                            "version_value": "\u0026#x80"
                          },
                          {
                            "version_value": "\" 11.5.4"
                          },
                          {
                            "version_value": "11.2.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "F5 Networks, Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1, when ConfigSync is configured, attackers on adjacent networks may be able to bypass the TLS protections usually used to encrypted and authenticate connections to mcpd. This vulnerability may allow remote attackers to cause a denial-of-service (DoS) attack via resource exhaustion."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "denial of service"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.f5.com/csp/article/K62279530",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K62279530"
            },
            {
              "name": "1039676",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039676"
            },
            {
              "name": "101636",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/101636"
            },
            {
              "name": "1039675",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039675"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
    "assignerShortName": "f5",
    "cveId": "CVE-2017-6161",
    "datePublished": "2017-10-27T14:00:00Z",
    "dateReserved": "2017-02-21T00:00:00",
    "dateUpdated": "2024-09-16T20:31:33.873Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted