{
  "id": "CVE-2017-6158",
  "sourceIdentifier": "f5sirt@f5.com",
  "published": "2018-04-13T13:29:00.423",
  "lastModified": "2019-10-03T00:03:26.223",
  "vulnStatus": "Analyzed",
  "descriptions": [
    {
      "lang": "en",
      "value": "In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling of invalid IP addresses."
    },
    {
      "lang": "es",
      "value": "En F5 BIG-IP, de la versi\u00f3n 12.0.0 a la 12.1.2, de la versi\u00f3n 11.6.0 a la 11.6.1, de la versi\u00f3n 11.5.1 a la 11.5.5 o en la versi\u00f3n 11.2.1, hay una vulnerabilidad en TMM relacionada con la gesti\u00f3n de direcciones IP no v\u00e1lidas."
    }
  ],
  "metrics": {
    "cvssMetricV30": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "3.0",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "availabilityImpact": "LOW",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 2.5
      }
    ],
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P",
          "accessVector": "NETWORK",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.4
        },
        "baseSeverity": "MEDIUM",
        "exploitabilityScore": 10.0,
        "impactScore": 4.9,
        "acInsufInfo": true,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.5.1",
              "versionEndIncluding": "11.5.5",
              "matchCriteriaId": "6E3612B2-6722-4833-A386-DFBE4F957126"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.6.0",
              "versionEndIncluding": "11.6.1",
              "matchCriteriaId": "2A113DC2-B084-48C2-8ECF-F0281AC34246"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "12.0.0",
              "versionEndIncluding": "12.1.2",
              "matchCriteriaId": "C1F5FF67-5D17-4760-AFDC-4234EC1E6306"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9EA336A-8055-4DA8-8F79-07C4ADE83E32"
            }
          ]
        }
      ]
    },
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.5.1",
              "versionEndIncluding": "11.5.5",
              "matchCriteriaId": "2591686E-97C4-465F-A725-0037A193C44F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.6.0",
              "versionEndIncluding": "11.6.1",
              "matchCriteriaId": "2AC4ECCE-9343-4462-872C-FA4860998B69"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "12.0.0",
              "versionEndIncluding": "12.1.2",
              "matchCriteriaId": "39E45CF5-C9E4-4AB9-A6D5-66F8336DDB79"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "05EAC483-AD5B-41C2-98F1-A186E2DCB04E"
            }
          ]
        }
      ]
    },
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.5.1",
              "versionEndIncluding": "11.5.5",
              "matchCriteriaId": "424205B0-5E73-4AF2-860A-52129B9734D3"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.6.0",
              "versionEndIncluding": "11.6.1",
              "matchCriteriaId": "55D59D80-4DC5-4A84-BF42-A5AC2D39CC7A"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "12.0.0",
              "versionEndIncluding": "12.1.2",
              "matchCriteriaId": "93212B86-21EA-4340-9149-E58F65285C15"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "9FDC1C0F-A00A-456C-AB51-CD139B15CB61"
            }
          ]
        }
      ]
    },
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.5.1",
              "versionEndIncluding": "11.5.5",
              "matchCriteriaId": "C56690F7-E53D-453C-AF8B-04D951D96D49"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.6.0",
              "versionEndIncluding": "11.6.1",
              "matchCriteriaId": "857B3A62-F808-4CA9-BFAD-C133D94CF531"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "12.0.0",
              "versionEndIncluding": "12.1.2",
              "matchCriteriaId": "25944BCA-3EEB-4396-AC8F-EF58834BC47E"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_analytics:11.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "867B2CA9-DAE5-4070-B8E6-F624C59F5054"
            }
          ]
        }
      ]
    },
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.5.1",
              "versionEndIncluding": "11.5.5",
              "matchCriteriaId": "5800062B-A845-449E-AB3A-86F5A89E6428"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.6.0",
              "versionEndIncluding": "11.6.1",
              "matchCriteriaId": "DDE31583-1329-468C-87C9-BBB8FB5132B9"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "12.0.0",
              "versionEndIncluding": "12.1.2",
              "matchCriteriaId": "0ACC0695-E62E-4748-AA8A-46772EB8C83C"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "FB630A86-FB84-4199-9E4D-38EB620806CB"
            }
          ]
        }
      ]
    },
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.5.1",
              "versionEndIncluding": "11.5.5",
              "matchCriteriaId": "39403241-7F3D-44F3-8F56-576DCABB28CB"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.6.0",
              "versionEndIncluding": "11.6.1",
              "matchCriteriaId": "C8FF324E-8533-403A-BEA9-617A28033CC8"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "12.0.0",
              "versionEndIncluding": "12.1.2",
              "matchCriteriaId": "7CB146EF-CCAB-4194-9735-F8909E283308"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:11.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A635FEC4-4F52-4971-A67D-47E68108E4F4"
            }
          ]
        }
      ]
    },
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.5.1",
              "versionEndIncluding": "11.5.5",
              "matchCriteriaId": "C4832316-B149-4316-8D86-DF7C12154979"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.6.0",
              "versionEndIncluding": "11.6.1",
              "matchCriteriaId": "C6A378E8-5AD0-4640-A236-1B4655D2CDDC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "12.0.0",
              "versionEndIncluding": "12.1.2",
              "matchCriteriaId": "2669BE56-A3EF-4080-A6FE-4565A85BD954"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:11.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "3136A8D1-3D0D-46B3-9A3A-737074864F1B"
            }
          ]
        }
      ]
    },
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.5.1",
              "versionEndIncluding": "11.5.5",
              "matchCriteriaId": "53C744A7-4EA6-4CAE-BA28-7FC9E102DD02"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.6.0",
              "versionEndIncluding": "11.6.1",
              "matchCriteriaId": "80E2E5FE-217F-4267-AEB9-719E376D2FB0"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "12.0.0",
              "versionEndIncluding": "12.1.2",
              "matchCriteriaId": "5EF737FD-7706-4536-912A-C22E0B2FE3C4"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:11.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "84452450-77FA-4708-9C86-5464D541C8ED"
            }
          ]
        }
      ]
    },
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.5.1",
              "versionEndIncluding": "11.5.5",
              "matchCriteriaId": "65560D3E-3AFD-4D3D-8EFF-E277836D5651"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.6.0",
              "versionEndIncluding": "11.6.1",
              "matchCriteriaId": "48D3CF2B-1D30-461B-836D-A16EAA15F5BC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "12.0.0",
              "versionEndIncluding": "12.1.2",
              "matchCriteriaId": "C4A5CD9B-D257-4EC9-8C57-D9552C2FFFFC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_link_controller:11.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "2DD53088-3BD4-4AF9-8934-4905231A75E8"
            }
          ]
        }
      ]
    },
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.5.1",
              "versionEndIncluding": "11.5.5",
              "matchCriteriaId": "573B289C-DFB1-4AE0-A792-0F591D407200"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.6.0",
              "versionEndIncluding": "11.6.1",
              "matchCriteriaId": "A5AB7A86-4C18-4FCA-90A0-BA9116FF31C3"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "12.0.0",
              "versionEndIncluding": "12.1.2",
              "matchCriteriaId": "BDE77CCE-7F97-48EA-A9D3-090B1481616F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D964BBB4-B343-43C6-A7A1-39BD9E1EEA16"
            }
          ]
        }
      ]
    },
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.5.1",
              "versionEndIncluding": "11.5.5",
              "matchCriteriaId": "5224C47E-1765-4E8A-BF6A-268DB70617B8"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.6.0",
              "versionEndIncluding": "11.6.1",
              "matchCriteriaId": "E84D701A-96D1-43A8-B87C-0BAA6912F16E"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "12.0.0",
              "versionEndIncluding": "12.1.2",
              "matchCriteriaId": "2C4A4202-DBAD-4717-80E5-B6818551B20F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_webaccelerator:11.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF7FCC81-2F1D-4EF5-956B-085FB7FEFAE7"
            }
          ]
        }
      ]
    },
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.5.1",
              "versionEndIncluding": "11.5.5",
              "matchCriteriaId": "3039312F-757B-4441-9108-2BF369C5A500"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.6.0",
              "versionEndIncluding": "11.6.1",
              "matchCriteriaId": "8552AED4-DC7B-4DA1-AD49-9AD856A69DC1"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "12.0.0",
              "versionEndIncluding": "12.1.2",
              "matchCriteriaId": "57010E5E-5940-4DDA-AD56-D646D54084AA"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_websafe:11.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "BFD9136F-100A-4747-84B7-33D6D8905DDB"
            }
          ]
        }
      ]
    },
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.5.1",
              "versionEndIncluding": "11.5.5",
              "matchCriteriaId": "0B8B038F-8E96-463E-83E9-5D5A6ACD7E9F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "11.6.0",
              "versionEndIncluding": "11.6.1",
              "matchCriteriaId": "B7F1641A-D20C-4F6B-86A2-5F246A12B446"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "12.0.0",
              "versionEndIncluding": "12.1.2",
              "matchCriteriaId": "EA4894E2-8DFE-47FC-B0B2-EF5E8C5648AA"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:11.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6DE6A792-9D75-4BAF-A8BA-DC5879948BAC"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://support.f5.com/csp/article/K19361245",
      "source": "f5sirt@f5.com",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}