CVEvulnerability
CVE-2017-0303
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-10-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-459
Description
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 11.6.1, under limited circumstances connections handled by a Virtual Server with an associated SOCKS profile may not be properly cleaned up, potentially leading to resource starvation. Connections may be left in the connection table which then can only be removed by restarting TMM. Over time this may lead to the BIG-IP being unable to process further connections.
Affected configurations
• f5 big-ip local traffic manager 11.5.0
• f5 big-ip local traffic manager 11.5.1
• f5 big-ip local traffic manager 11.5.2
• f5 big-ip local traffic manager 11.5.3
• f5 big-ip local traffic manager 11.5.4
• f5 big-ip local traffic manager 11.5.5
• f5 big-ip local traffic manager 11.6.0
• f5 big-ip local traffic manager 11.6.1
• f5 big-ip local traffic manager 12.0.0
• f5 big-ip local traffic manager 12.1.0
• f5 big-ip local traffic manager 12.1.1
• f5 big-ip local traffic manager 12.1.2
• f5 big-ip local traffic manager 13.0.0
• f5 big-ip application acceleration manager 11.5.0
• f5 big-ip application acceleration manager 11.5.1
• f5 big-ip application acceleration manager 11.5.2
• f5 big-ip application acceleration manager 11.5.3
• f5 big-ip application acceleration manager 11.5.4
• f5 big-ip application acceleration manager 11.5.5
• f5 big-ip application acceleration manager 11.6.0
• f5 big-ip application acceleration manager 11.6.1
• f5 big-ip application acceleration manager 12.0.0
• f5 big-ip application acceleration manager 12.1.0
• f5 big-ip application acceleration manager 12.1.1
• f5 big-ip application acceleration manager 12.1.2
• f5 big-ip application acceleration manager 13.0.0
• f5 big-ip advanced firewall manager 11.5.0
• f5 big-ip advanced firewall manager 11.5.1
• f5 big-ip advanced firewall manager 11.5.2
• f5 big-ip advanced firewall manager 11.5.3
• f5 big-ip advanced firewall manager 11.5.4
• f5 big-ip advanced firewall manager 11.5.5
• f5 big-ip advanced firewall manager 11.6.0
• f5 big-ip advanced firewall manager 11.6.1
• f5 big-ip advanced firewall manager 12.0.0
• f5 big-ip advanced firewall manager 12.1.0
• f5 big-ip advanced firewall manager 12.1.1
• f5 big-ip advanced firewall manager 12.1.2
• f5 big-ip advanced firewall manager 13.0.0
• f5 big-ip access policy manager 11.5.0
• f5 big-ip access policy manager 11.5.1
• f5 big-ip access policy manager 11.5.2
• f5 big-ip access policy manager 11.5.3
• f5 big-ip access policy manager 11.5.4
• f5 big-ip access policy manager 11.5.5
• f5 big-ip access policy manager 11.6.0
• f5 big-ip access policy manager 11.6.1
• f5 big-ip access policy manager 12.0.0
• f5 big-ip access policy manager 12.1.0
• f5 big-ip access policy manager 12.1.1
• f5 big-ip access policy manager 12.1.2
• f5 big-ip access policy manager 13.0.0
• f5 big-ip application security manager 11.5.0
• f5 big-ip application security manager 11.5.1
• f5 big-ip application security manager 11.5.2
• f5 big-ip application security manager 11.5.3
• f5 big-ip application security manager 11.5.4
• f5 big-ip application security manager 11.5.5
• f5 big-ip application security manager 11.6.0
• f5 big-ip application security manager 11.6.1
… and 32 more
Related
Weakness · CWE (1)
- CWE-459 Incomplete Cleanup weakness
References
- http://www.securityfocus.com/bid/101612 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039674 Third Party Advisory, VDB Entry
- https://support.f5.com/csp/article/K30201296 Vendor Advisory
- http://www.securityfocus.com/bid/101612 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1039674 Third Party Advisory, VDB Entry
- https://support.f5.com/csp/article/K30201296 Vendor Advisory