Medium severity5.3NVD Advisory· Published Oct 27, 2017· Updated Jun 17, 2026
CVE-2017-6161
CVE-2017-6161
Description
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1, when ConfigSync is configured, attackers on adjacent networks may be able to bypass the TLS protections usually used to encrypted and authenticate connections to mcpd. This vulnerability may allow remote attackers to cause a denial-of-service (DoS) attack via resource exhaustion.
Affected products
3- F5, Inc./Big Ip (ltm, Aam, Afm, Analytics, Apm, Asm, DNS, Edge Gateway, Fps, Gtm, Link Controller, Pem, Webaccelerator)llm-fuzzy2 versions
12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1+ 1 more
- (no CPE)range: 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1
- (no CPE)range: 12.0.0 - 12.1.2
Patches
Vulnerability mechanics
References
4- www.securityfocus.com/bid/101636nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1039675nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1039676nvdThird Party AdvisoryVDB Entry
- support.f5.com/csp/article/K62279530nvdVendor Advisory
News mentions
0No linked articles in our index yet.