CVE-2017-6141

Summary

In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 through 12.1.2, certain values in a TLS abbreviated handshake when using a client SSL profile with the Session Ticket option enabled may cause disruption of service to the Traffic Management Microkernel (TMM). The Session Ticket option is disabled by default.

Affected Software

VendorProductVersion RangeStatus
F5 Networks, Inc.F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, WebSafe12.1.0 through 12.1.2affected

Weaknesses

  • TLS abbreviated handshake vulnerability

ADP Enrichment

CVE Program Container

Additional References

References