mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-29 01:31:20 +00:00
429 lines
14 KiB
JSON
429 lines
14 KiB
JSON
|
{
|
||
|
|
"id": "CVE-2017-6134",
|
||
|
|
"sourceIdentifier": "f5sirt@f5.com",
|
||
|
|
"published": "2017-12-21T17:29:00.403",
|
||
|
|
"lastModified": "2018-01-12T02:29:03.600",
|
||
|
|
"vulnStatus": "Modified",
|
||
|
|
"descriptions": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, 12.1.0 - 12.1.2 and 11.5.1 - 11.6.1, an undisclosed sequence of packets, sourced from an adjacent network may cause TMM to crash."
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"lang": "es",
|
||
|
|
"value": "En F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM y WebSafe, en versiones de software 13.0.0, de la 12.1.0 a la 12.1.2 y de la 11.5.1 a la 11.6.1, una secuencia de paquetes no revelada cuyo origen es una red adyacente podr\u00eda hacer que TMM se cierre de manera inesperada."
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"metrics": {
|
||
|
|
"cvssMetricV30": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"cvssData": {
|
||
|
|
"version": "3.0",
|
||
|
|
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
|
||
|
|
"attackVector": "ADJACENT_NETWORK",
|
||
|
|
"attackComplexity": "LOW",
|
||
|
|
"privilegesRequired": "NONE",
|
||
|
|
"userInteraction": "NONE",
|
||
|
|
"scope": "UNCHANGED",
|
||
|
|
"confidentialityImpact": "NONE",
|
||
|
|
"integrityImpact": "NONE",
|
||
|
|
"availabilityImpact": "HIGH",
|
||
|
|
"baseScore": 6.5,
|
||
|
|
"baseSeverity": "MEDIUM"
|
||
|
|
},
|
||
|
|
"exploitabilityScore": 2.8,
|
||
|
|
"impactScore": 3.6
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"cvssMetricV2": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"cvssData": {
|
||
|
|
"version": "2.0",
|
||
|
|
"vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:P",
|
||
|
|
"accessVector": "ADJACENT_NETWORK",
|
||
|
|
"accessComplexity": "LOW",
|
||
|
|
"authentication": "NONE",
|
||
|
|
"confidentialityImpact": "NONE",
|
||
|
|
"integrityImpact": "NONE",
|
||
|
|
"availabilityImpact": "PARTIAL",
|
||
|
|
"baseScore": 3.3
|
||
|
|
},
|
||
|
|
"baseSeverity": "LOW",
|
||
|
|
"exploitabilityScore": 6.5,
|
||
|
|
"impactScore": 2.9,
|
||
|
|
"acInsufInfo": false,
|
||
|
|
"obtainAllPrivilege": false,
|
||
|
|
"obtainUserPrivilege": false,
|
||
|
|
"obtainOtherPrivilege": false,
|
||
|
|
"userInteractionRequired": false
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"weaknesses": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"description": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "CWE-20"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"configurations": [
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "11.5.1",
|
||
|
|
"versionEndIncluding": "11.6.1",
|
||
|
|
"matchCriteriaId": "993AD7D2-DBC5-40B6-9CBE-1BA9590FCCC4"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "12.1.0",
|
||
|
|
"versionEndIncluding": "12.1.2",
|
||
|
|
"matchCriteriaId": "48AEF668-8ABE-4A09-B45B-AB30B7A6464B"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:13.0.0:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "BA7D64DC-7271-4617-BD46-99C8246779CA"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "11.5.1",
|
||
|
|
"versionEndIncluding": "11.6.1",
|
||
|
|
"matchCriteriaId": "8E8D6DC6-FE8D-4C73-930B-99E2B3FB18ED"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "12.1.0",
|
||
|
|
"versionEndIncluding": "12.1.2",
|
||
|
|
"matchCriteriaId": "6CAB3D2D-F589-41AB-A68A-8AFA8760E394"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:13.0.0:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "3D75D5AD-C20A-4D94-84E0-E695C9D2A26D"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "11.5.1",
|
||
|
|
"versionEndIncluding": "11.6.1",
|
||
|
|
"matchCriteriaId": "13EDBCE3-05FD-4B5B-926B-0B5B18199083"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "12.1.0",
|
||
|
|
"versionEndIncluding": "12.1.2",
|
||
|
|
"matchCriteriaId": "F3C3362F-1251-4E7B-B8CB-BBE7344A915E"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:13.0.0:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "8C4E5F36-434B-48E1-9715-4EEC22FB23D1"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "11.5.1",
|
||
|
|
"versionEndIncluding": "11.6.1",
|
||
|
|
"matchCriteriaId": "B62C49F2-DAAD-467A-B27C-20E2A014787B"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "12.1.0",
|
||
|
|
"versionEndIncluding": "12.1.2",
|
||
|
|
"matchCriteriaId": "A7E33F47-378B-4077-AA3E-6EBED04D3609"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_analytics:13.0.0:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "34D75E7F-B65F-421D-92EE-6B20756019C2"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "11.5.1",
|
||
|
|
"versionEndIncluding": "11.6.1",
|
||
|
|
"matchCriteriaId": "83DC910C-4396-4945-8635-E9C8038BE872"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "12.1.0",
|
||
|
|
"versionEndIncluding": "12.1.2",
|
||
|
|
"matchCriteriaId": "E6A76187-6118-4A9D-9F7C-0C9D3931BF42"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:13.0.0:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "BCF89E7C-806E-4800-BAA9-0225433B6C56"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "11.5.1",
|
||
|
|
"versionEndIncluding": "11.6.1",
|
||
|
|
"matchCriteriaId": "EAB57533-B744-4A2F-8AE0-7D8037CBA70D"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "12.1.0",
|
||
|
|
"versionEndIncluding": "12.1.2",
|
||
|
|
"matchCriteriaId": "FE82B01E-278D-40DB-9CD5-D69F863A97CD"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:13.0.0:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "7569977A-E567-4115-B00C-4B0CBA86582E"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_dns:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "11.5.1",
|
||
|
|
"versionEndIncluding": "11.6.1",
|
||
|
|
"matchCriteriaId": "65F88F93-D566-44FC-969D-B11C51B4261E"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_dns:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "12.1.0",
|
||
|
|
"versionEndIncluding": "12.1.2",
|
||
|
|
"matchCriteriaId": "D90D84D6-E4EF-4686-A7D9-52FF577251D8"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_dns:13.0.0:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "93674162-3A63-4F05-B68F-B7D54B0AAE98"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "11.5.1",
|
||
|
|
"versionEndIncluding": "11.6.1",
|
||
|
|
"matchCriteriaId": "5F5F1D95-D705-4715-B844-52E8ECBB266D"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "12.1.0",
|
||
|
|
"versionEndIncluding": "12.1.2",
|
||
|
|
"matchCriteriaId": "528457E0-A8CA-454B-AC01-C55630E2FA49"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:13.0.0:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "3914B25C-4E86-4C00-A199-4C9A99BA2EC4"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "11.5.1",
|
||
|
|
"versionEndIncluding": "11.6.1",
|
||
|
|
"matchCriteriaId": "BC21461D-B2B2-4FD2-B24F-DCAF525847EF"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "12.1.0",
|
||
|
|
"versionEndIncluding": "12.1.2",
|
||
|
|
"matchCriteriaId": "B8AE206C-8F30-4C1A-9823-BAF2052EF065"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:13.0.0:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "E2C4414E-8016-48B5-8CC3-F97FF2D85922"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "11.5.1",
|
||
|
|
"versionEndIncluding": "11.6.1",
|
||
|
|
"matchCriteriaId": "C73A1C36-0F0F-4EDD-99C6-321F9367FF70"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "12.1.0",
|
||
|
|
"versionEndIncluding": "12.1.2",
|
||
|
|
"matchCriteriaId": "91F8E790-6C3C-476D-B403-4F13CEF0BA7A"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:13.0.0:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "42821916-E601-4831-B37B-3202ACF2C562"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "11.5.1",
|
||
|
|
"versionEndIncluding": "11.6.1",
|
||
|
|
"matchCriteriaId": "6E27FFA2-D2AC-4838-A4C6-58964794977C"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
|
||
|
|
"versionStartIncluding": "12.1.0",
|
||
|
|
"versionEndIncluding": "12.1.2",
|
||
|
|
"matchCriteriaId": "48B5CC4A-32F1-474A-A89B-A6C7E56513D7"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:f5:big-ip_websafe:13.0.0:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "B2E56D76-1A89-46AB-9C17-CB24662FFDE7"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"references": [
|
||
|
|
{
|
||
|
|
"url": "http://www.securityfocus.com/bid/102466",
|
||
|
|
"source": "f5sirt@f5.com"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.securitytracker.com/id/1040044",
|
||
|
|
"source": "f5sirt@f5.com",
|
||
|
|
"tags": [
|
||
|
|
"Third Party Advisory",
|
||
|
|
"VDB Entry"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.securitytracker.com/id/1040045",
|
||
|
|
"source": "f5sirt@f5.com",
|
||
|
|
"tags": [
|
||
|
|
"Third Party Advisory",
|
||
|
|
"VDB Entry"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "https://support.f5.com/csp/article/K37404773",
|
||
|
|
"source": "f5sirt@f5.com",
|
||
|
|
"tags": [
|
||
|
|
"Issue Tracking",
|
||
|
|
"Vendor Advisory"
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|