CVE-2017-0303

high-risk
Published 2017-10-27

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 11.6.1, under limited circumstances connections handled by a Virtual Server with an associated SOCKS profile may not be properly cleaned up, potentially leading to resource starvation. Connections may be left in the connection table which then can only be removed by restarting TMM. Over time this may lead to the BIG-IP being unable to process further connections.

Do I need to act?

~
2.4% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (20)

Affected Vendors

F5

References (6)

Third Party Advisory http://www.securityfocus.com/bid/101612
Third Party Advisory http://www.securitytracker.com/id/1039674
Vendor Advisory https://support.f5.com/csp/article/K30201296
Third Party Advisory http://www.securityfocus.com/bid/101612
Third Party Advisory http://www.securitytracker.com/id/1039674
Vendor Advisory https://support.f5.com/csp/article/K30201296
61
/ 100
high-risk
Severity 26/34 · High
Exploitability 6/34 · Minimal
Exposure 29/34 · Critical