CVE-2016-7475 Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the Traffic Management Microkernel (TMM) may not properly clean-up pool member network connections when using SPD...
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the Traffic Management Microkernel (TMM) may not properly clean-up pool member network connections when using SPDY or HTTP/2 virtual server profiles.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| f5 big-ip access policy manager | >= 11.4.0, <= 11.6.1 | No fix listed |
| f5 big-ip access policy manager | >= 12.0.0, <= 12.1.0 | No fix listed |
| f5 big-ip advanced firewall manager | >= 11.4.0, <= 11.6.1 | No fix listed |
| f5 big-ip advanced firewall manager | >= 12.0.0, <= 12.1.0 | No fix listed |
| f5 big-ip application acceleration manager | >= 11.4.0, <= 11.6.1 | No fix listed |
| f5 big-ip application acceleration manager | >= 12.0.0, <= 12.1.0 | No fix listed |
| f5 big-ip application security manager | >= 11.4.0, <= 11.6.1 | No fix listed |
| f5 big-ip application security manager | >= 12.0.0, <= 12.1.0 | No fix listed |
| f5 big-ip link controller | >= 11.4.0, <= 11.6.1 | No fix listed |
| f5 big-ip link controller | >= 12.0.0, <= 12.1.0 | No fix listed |
| f5 big-ip local traffic manager | >= 11.4.0, <= 11.6.1 | No fix listed |
| f5 big-ip local traffic manager | >= 12.0.0, <= 12.1.0 | No fix listed |
| f5 big-ip policy enforcement manager | >= 11.4.0, <= 11.6.1 | No fix listed |
| f5 big-ip policy enforcement manager | >= 12.0.0, <= 12.1.0 | No fix listed |
| f5 big-ip protocol security module | >= 11.4.0, <= 11.4.1 | No fix listed |
| f5 BIG-IP | = 12.0.0-12.1.0, 11.6.0-11.6.1, 11.4.0-11.5.4 HF1 | No fix listed |
References
- support.f5.com vendor-advisory