Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2017-6160

In F5 BIG-IP AAM and PEM software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.4.1 to 11.5.4, a remote attacker may create maliciously crafted HTTP request to cause Traffic Management Microkernel (TMM) to restart and temporarily fail to process traffic. This issue is exposed on virtual servers using a Policy Enforcement profile or a Web Acceleration profile. Systems that do not have BIG-IP AAM module provisioned are not vulnerable. The Traffic Management Microkernel (TMM) may restart and temporarily fail to process traffic. Systems that do not have BIG-IP AAM or PEM module provisioned are not vulnerable.

  • Published: Oct 27, 2017
  • Updated: Apr 13, 2023
  • CVE: CVE-2017-6160
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.9
  • AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:N/A:P

No CWE or OWASP classifications available.

Software From Fixed in
f5 / big-ip_application_acceleration_manager 11.5.2 11.5.2.x
f5 / big-ip_application_acceleration_manager 12.0.0 12.0.0.x
f5 / big-ip_application_acceleration_manager 12.1.0 12.1.0.x
f5 / big-ip_application_acceleration_manager 11.4.1 11.4.1.x
f5 / big-ip_application_acceleration_manager 11.5.1 11.5.1.x
f5 / big-ip_application_acceleration_manager 11.6.1 11.6.1.x
f5 / big-ip_application_acceleration_manager 11.5.4 11.5.4.x
f5 / big-ip_application_acceleration_manager 12.1.1 12.1.1.x
f5 / big-ip_application_acceleration_manager 11.5.3 11.5.3.x
f5 / big-ip_application_acceleration_manager 11.6.0 11.6.0.x
f5 / big-ip_application_acceleration_manager 11.5.0 11.5.0.x
f5 / big-ip_application_acceleration_manager 11.4.0 11.4.0.x
f5 / big-ip_application_acceleration_manager 11.5.5 11.5.5.x
f5 / big-ip_policy_enforcement_manager 12.1.1 12.1.1.x
f5 / big-ip_policy_enforcement_manager 11.5.2 11.5.2.x
f5 / big-ip_policy_enforcement_manager 11.5.0 11.5.0.x
f5 / big-ip_policy_enforcement_manager 12.0.0 12.0.0.x
f5 / big-ip_policy_enforcement_manager 11.4.0 11.4.0.x
f5 / big-ip_policy_enforcement_manager 11.5.3 11.5.3.x
f5 / big-ip_policy_enforcement_manager 11.6.1 11.6.1.x
f5 / big-ip_policy_enforcement_manager 11.4.1 11.4.1.x
f5 / big-ip_policy_enforcement_manager 11.5.4 11.5.4.x
f5 / big-ip_policy_enforcement_manager 12.1.0 12.1.0.x
f5 / big-ip_policy_enforcement_manager 11.6.0 11.6.0.x
f5 / big-ip_policy_enforcement_manager 11.5.1 11.5.1.x
f5 / big-ip_policy_enforcement_manager 11.5.5 11.5.5.x