Vulnerability-Lookup

BDU:2017-02608 (CVE-2017-0303)

Vulnerability from fstec – Published: 2017-12-21 – Updated: 2021-03-23 – View on bdu.fstec.ru Fixed

Title

Уязвимость прокси-сервера SOCKS средства защиты BIG-IP Websafe, системы контроля и управления сетевым трафиком BIG-IP Policy Enforcement Manager, средства защиты приложений BIG-IP Application Security Manager, системы балансировки локального трафика BIG-IP Local Traffic Manager, системы балансировки интернет-трафика BIG-IP Link Controller, средства доставки приложений BIG-IP Application Acceleration Manager, межсетевого экрана BIG-IP Advanced Firewall Manager и средства контроля доступа и удаленной аутентификации BIG-IP Access Policy Manager, позволяющая нарушителю вызвать отказ в обслуживании

Summary

Уязвимость прокси-сервера SOCKS средства защиты BIG-IP Websafe, системы контроля и управления сетевым трафиком BIG-IP Policy Enforcement Manager, средства защиты приложений BIG-IP Application Security Manager, системы балансировки локального трафика BIG-IP Local Traffic Manager, системы балансировки интернет-трафика BIG-IP Link Controller, средства доставки приложений BIG-IP Application Acceleration Manager, межсетевого экрана BIG-IP Advanced Firewall Manager и средства контроля доступа и удаленной аутентификации BIG-IP Access Policy Manager связана с ошибками механизма очистки. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании

Severity

5.0 (Medium) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Resource exhaustion

Incidents

Being clarified

Remediation

Software update

CWE

CWE-399 - Ошибки управления ресурсом

Aliases

CVE-2017-0303, SECURITY, TRACKER, ID:1039674, BID, ID:101612

References

3 references

URL
http://www.securityfocus.com/bid/101612
http://www.securitytracker.com/id/1039674
https://support.f5.com/csp/article/K30201296

Impacted products

8 products from 2 vendors

Vendors

F5 Networks, Inc.

Products

BIG-IP Advanced Firewall Manager, BIG-IP Application Acceleration Manager, BIG-IP Access Policy Manager, BIG-IP Application Security Manager, BIG-IP Policy Enforcement Manager, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP WebSafe

Versions

12.0.0 (BIG-IP Advanced Firewall Manager), 12.0.0 (BIG-IP Application Acceleration Manager), 12.0.0 (BIG-IP Access Policy Manager), 12.0.0 (BIG-IP Application Security Manager), 12.0.0 (BIG-IP Policy Enforcement Manager), 12.0.0 (BIG-IP Link Controller), 12.0.0 (BIG-IP Local Traffic Manager), 13.0.0 (BIG-IP Application Security Manager), 13.0.0 (BIG-IP Link Controller), 13.0.0 (BIG-IP Advanced Firewall Manager), 13.0.0 (BIG-IP Access Policy Manager), 13.0.0 (BIG-IP Local Traffic Manager), 13.0.0 (BIG-IP Policy Enforcement Manager), 13.0.0 (BIG-IP Application Acceleration Manager), 11.5.0 (BIG-IP Policy Enforcement Manager), 11.5.1 (BIG-IP Policy Enforcement Manager), 11.5.2 (BIG-IP Policy Enforcement Manager), 11.5.3 (BIG-IP Policy Enforcement Manager), 11.5.4 (BIG-IP Policy Enforcement Manager), 11.5.5 (BIG-IP Policy Enforcement Manager), 11.6.0 (BIG-IP Policy Enforcement Manager), 11.6.1 (BIG-IP Policy Enforcement Manager), 12.1.0 (BIG-IP Policy Enforcement Manager), 12.1.1 (BIG-IP Policy Enforcement Manager), 12.1.2 (BIG-IP Policy Enforcement Manager), 1.0.0 (BIG-IP WebSafe), 11.5.0 (BIG-IP Application Security Manager), 11.5.1 (BIG-IP Application Security Manager), 11.5.2 (BIG-IP Application Security Manager), 11.5.3 (BIG-IP Application Security Manager), 11.5.4 (BIG-IP Application Security Manager), 11.5.5 (BIG-IP Application Security Manager), 11.6.0 (BIG-IP Application Security Manager), 11.6.1 (BIG-IP Application Security Manager), 12.1.0 (BIG-IP Application Security Manager), 12.1.1 (BIG-IP Application Security Manager), 12.1.2 (BIG-IP Application Security Manager), 11.5.0 (BIG-IP Local Traffic Manager), 11.5.1 (BIG-IP Local Traffic Manager), 11.5.2 (BIG-IP Local Traffic Manager), 11.5.3 (BIG-IP Local Traffic Manager), 11.5.4 (BIG-IP Local Traffic Manager), 11.5.5 (BIG-IP Local Traffic Manager), 11.6.0 (BIG-IP Local Traffic Manager), 11.6.1 (BIG-IP Local Traffic Manager), 12.1.0 (BIG-IP Local Traffic Manager), 12.1.1 (BIG-IP Local Traffic Manager), 12.1.2 (BIG-IP Local Traffic Manager), 11.5.0 (BIG-IP Link Controller), 11.5.1 (BIG-IP Link Controller), 11.5.2 (BIG-IP Link Controller), 11.5.3 (BIG-IP Link Controller), 11.5.4 (BIG-IP Link Controller), 11.5.5 (BIG-IP Link Controller), 11.6.0 (BIG-IP Link Controller), 11.6.1 (BIG-IP Link Controller), 12.1.0 (BIG-IP Link Controller), 12.1.1 (BIG-IP Link Controller), 12.1.2 (BIG-IP Link Controller), 11.5.0 (BIG-IP Application Acceleration Manager), 11.5.1 (BIG-IP Application Acceleration Manager), 11.5.2 (BIG-IP Application Acceleration Manager), 11.5.3 (BIG-IP Application Acceleration Manager), 11.5.4 (BIG-IP Application Acceleration Manager), 11.5.5 (BIG-IP Application Acceleration Manager), 11.6.0 (BIG-IP Application Acceleration Manager), 11.6.1 (BIG-IP Application Acceleration Manager), 12.1.0 (BIG-IP Application Acceleration Manager), 12.1.1 (BIG-IP Application Acceleration Manager), 12.1.2 (BIG-IP Application Acceleration Manager), 11.5.0 (BIG-IP Advanced Firewall Manager), 11.5.1 (BIG-IP Advanced Firewall Manager), 11.5.2 (BIG-IP Advanced Firewall Manager), 11.5.3 (BIG-IP Advanced Firewall Manager), 11.5.4 (BIG-IP Advanced Firewall Manager), 11.5.5 (BIG-IP Advanced Firewall Manager), 11.6.0 (BIG-IP Advanced Firewall Manager), 11.6.1 (BIG-IP Advanced Firewall Manager), 12.1.0 (BIG-IP Advanced Firewall Manager), 12.1.1 (BIG-IP Advanced Firewall Manager), 12.1.2 (BIG-IP Advanced Firewall Manager), 11.5.0 (BIG-IP Access Policy Manager), 11.5.1 (BIG-IP Access Policy Manager), 11.5.2 (BIG-IP Access Policy Manager), 11.5.3 (BIG-IP Access Policy Manager), 11.5.4 (BIG-IP Access Policy Manager), 11.5.5 (BIG-IP Access Policy Manager), 11.6.0 (BIG-IP Access Policy Manager), 11.6.1 (BIG-IP Access Policy Manager), 12.1.0 (BIG-IP Access Policy Manager), 12.1.1 (BIG-IP Access Policy Manager), 12.1.2 (BIG-IP Access Policy Manager)

Product types

Network appliance software

Mitigations

Использование рекомендаций: https://support.f5.com/csp/article/K30201296

Credits

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "F5 Networks, Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "12.0.0 (BIG-IP Advanced Firewall Manager), 12.0.0 (BIG-IP Application Acceleration Manager), 12.0.0 (BIG-IP Access Policy Manager), 12.0.0 (BIG-IP Application Security Manager), 12.0.0 (BIG-IP Policy Enforcement Manager), 12.0.0 (BIG-IP Link Controller), 12.0.0 (BIG-IP Local Traffic Manager), 13.0.0 (BIG-IP Application Security Manager), 13.0.0 (BIG-IP Link Controller), 13.0.0 (BIG-IP Advanced Firewall Manager), 13.0.0 (BIG-IP Access Policy Manager), 13.0.0 (BIG-IP Local Traffic Manager), 13.0.0 (BIG-IP Policy Enforcement Manager), 13.0.0 (BIG-IP Application Acceleration Manager), 11.5.0 (BIG-IP Policy Enforcement Manager), 11.5.1 (BIG-IP Policy Enforcement Manager), 11.5.2 (BIG-IP Policy Enforcement Manager), 11.5.3 (BIG-IP Policy Enforcement Manager), 11.5.4 (BIG-IP Policy Enforcement Manager), 11.5.5 (BIG-IP Policy Enforcement Manager), 11.6.0 (BIG-IP Policy Enforcement Manager), 11.6.1 (BIG-IP Policy Enforcement Manager), 12.1.0 (BIG-IP Policy Enforcement Manager), 12.1.1 (BIG-IP Policy Enforcement Manager), 12.1.2 (BIG-IP Policy Enforcement Manager), 1.0.0 (BIG-IP WebSafe), 11.5.0 (BIG-IP Application Security Manager), 11.5.1 (BIG-IP Application Security Manager), 11.5.2 (BIG-IP Application Security Manager), 11.5.3 (BIG-IP Application Security Manager), 11.5.4 (BIG-IP Application Security Manager), 11.5.5 (BIG-IP Application Security Manager), 11.6.0 (BIG-IP Application Security Manager), 11.6.1 (BIG-IP Application Security Manager), 12.1.0 (BIG-IP Application Security Manager), 12.1.1 (BIG-IP Application Security Manager), 12.1.2 (BIG-IP Application Security Manager), 11.5.0 (BIG-IP Local Traffic Manager), 11.5.1 (BIG-IP Local Traffic Manager), 11.5.2 (BIG-IP Local Traffic Manager), 11.5.3 (BIG-IP Local Traffic Manager), 11.5.4 (BIG-IP Local Traffic Manager), 11.5.5 (BIG-IP Local Traffic Manager), 11.6.0 (BIG-IP Local Traffic Manager), 11.6.1 (BIG-IP Local Traffic Manager), 12.1.0 (BIG-IP Local Traffic Manager), 12.1.1 (BIG-IP Local Traffic Manager), 12.1.2 (BIG-IP Local Traffic Manager), 11.5.0 (BIG-IP Link Controller), 11.5.1 (BIG-IP Link Controller), 11.5.2 (BIG-IP Link Controller), 11.5.3 (BIG-IP Link Controller), 11.5.4 (BIG-IP Link Controller), 11.5.5 (BIG-IP Link Controller), 11.6.0 (BIG-IP Link Controller), 11.6.1 (BIG-IP Link Controller), 12.1.0 (BIG-IP Link Controller), 12.1.1 (BIG-IP Link Controller), 12.1.2 (BIG-IP Link Controller), 11.5.0 (BIG-IP Application Acceleration Manager), 11.5.1 (BIG-IP Application Acceleration Manager), 11.5.2 (BIG-IP Application Acceleration Manager), 11.5.3 (BIG-IP Application Acceleration Manager), 11.5.4 (BIG-IP Application Acceleration Manager), 11.5.5 (BIG-IP Application Acceleration Manager), 11.6.0 (BIG-IP Application Acceleration Manager), 11.6.1 (BIG-IP Application Acceleration Manager), 12.1.0 (BIG-IP Application Acceleration Manager), 12.1.1 (BIG-IP Application Acceleration Manager), 12.1.2 (BIG-IP Application Acceleration Manager), 11.5.0 (BIG-IP Advanced Firewall Manager), 11.5.1 (BIG-IP Advanced Firewall Manager), 11.5.2 (BIG-IP Advanced Firewall Manager), 11.5.3 (BIG-IP Advanced Firewall Manager), 11.5.4 (BIG-IP Advanced Firewall Manager), 11.5.5 (BIG-IP Advanced Firewall Manager), 11.6.0 (BIG-IP Advanced Firewall Manager), 11.6.1 (BIG-IP Advanced Firewall Manager), 12.1.0 (BIG-IP Advanced Firewall Manager), 12.1.1 (BIG-IP Advanced Firewall Manager), 12.1.2 (BIG-IP Advanced Firewall Manager), 11.5.0 (BIG-IP Access Policy Manager), 11.5.1 (BIG-IP Access Policy Manager), 11.5.2 (BIG-IP Access Policy Manager), 11.5.3 (BIG-IP Access Policy Manager), 11.5.4 (BIG-IP Access Policy Manager), 11.5.5 (BIG-IP Access Policy Manager), 11.6.0 (BIG-IP Access Policy Manager), 11.6.1 (BIG-IP Access Policy Manager), 12.1.0 (BIG-IP Access Policy Manager), 12.1.1 (BIG-IP Access Policy Manager), 12.1.2 (BIG-IP Access Policy Manager)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439: https://support.f5.com/csp/article/K30201296",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "26.10.2017",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.03.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "21.12.2017",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2017-02608",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2017-0303, Security Tracker ID:1039674, BID ID:101612",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "BIG-IP Advanced Firewall Manager, BIG-IP Application Acceleration Manager, BIG-IP Access Policy Manager, BIG-IP Application Security Manager, BIG-IP Policy Enforcement Manager, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP WebSafe",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 SOCKS \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b BIG-IP Websafe, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c BIG-IP Policy Enforcement Manager, \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 BIG-IP Application Security Manager, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u043a\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 BIG-IP Local Traffic Manager, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u043a\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 BIG-IP Link Controller, \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 BIG-IP Application Acceleration Manager, \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 BIG-IP Advanced Firewall Manager \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 BIG-IP Access Policy Manager, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u043c (CWE-399)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 SOCKS \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b BIG-IP Websafe, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c BIG-IP Policy Enforcement Manager, \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 BIG-IP Application Security Manager, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u043a\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 BIG-IP Local Traffic Manager, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u043a\u0438 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 BIG-IP Link Controller, \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 BIG-IP Application Acceleration Manager, \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 BIG-IP Advanced Firewall Manager \u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 BIG-IP Access Policy Manager \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043e\u0447\u0438\u0441\u0442\u043a\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "-",
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0418\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.securityfocus.com/bid/101612\nhttp://www.securitytracker.com/id/1039674\nhttps://support.f5.com/csp/article/K30201296",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-399",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

CVE-2017-0303 (GCVE-0-2017-0303)

Vulnerability from cvelistv5 – Published: 2017-10-27 14:00 – Updated: 2024-09-16 23:00

Summary

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 11.6.1, under limited circumstances connections handled by a Virtual Server with an associated SOCKS profile may not be properly cleaned up, potentially leading to resource starvation. Connections may be left in the connection table which then can only be removed by restarting TMM. Over time this may lead to the BIG-IP being unable to process further connections.

Severity

No CVSS data available.

CWE

denial of service

Assigner

f5 CNA under the mitre root

CNA scorecard B 84/100 over 87 records in the last 180 days details

References

3 references

URL	Tags
https://support.f5.com/csp/article/K30201296	x_refsource_CONFIRM
http://www.securityfocus.com/bid/101612	vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1039674	vdb-entryx_refsource_SECTRACK

Impacted products

1 product

Vendor	Product	Version
F5 Networks, Inc.	BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe	Affected: 13.0.0 Affected: 12.0.0 - 12.1.2 Affected: 11.5.1 - 11.6.1

Date Public

2017-10-26 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T13:03:56.546Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.f5.com/csp/article/K30201296"
          },
          {
            "name": "101612",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/101612"
          },
          {
            "name": "1039674",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1039674"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe",
          "vendor": "F5 Networks, Inc.",
          "versions": [
            {
              "status": "affected",
              "version": "13.0.0"
            },
            {
              "status": "affected",
              "version": "12.0.0 - 12.1.2"
            },
            {
              "status": "affected",
              "version": "11.5.1 - 11.6.1"
            }
          ]
        }
      ],
      "datePublic": "2017-10-26T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 11.6.1, under limited circumstances connections handled by a Virtual Server with an associated SOCKS profile may not be properly cleaned up, potentially leading to resource starvation. Connections may be left in the connection table which then can only be removed by restarting TMM. Over time this may lead to the BIG-IP being unable to process further connections."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "denial of service",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-01T09:57:01.000Z",
        "orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
        "shortName": "f5"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.f5.com/csp/article/K30201296"
        },
        {
          "name": "101612",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/101612"
        },
        {
          "name": "1039674",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1039674"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "f5sirt@f5.com",
          "DATE_PUBLIC": "2017-10-26T00:00:00",
          "ID": "CVE-2017-0303",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "13.0.0"
                          },
                          {
                            "version_value": "12.0.0 - 12.1.2"
                          },
                          {
                            "version_value": "11.5.1 - 11.6.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "F5 Networks, Inc."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 11.6.1, under limited circumstances connections handled by a Virtual Server with an associated SOCKS profile may not be properly cleaned up, potentially leading to resource starvation. Connections may be left in the connection table which then can only be removed by restarting TMM. Over time this may lead to the BIG-IP being unable to process further connections."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "denial of service"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.f5.com/csp/article/K30201296",
              "refsource": "CONFIRM",
              "url": "https://support.f5.com/csp/article/K30201296"
            },
            {
              "name": "101612",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/101612"
            },
            {
              "name": "1039674",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1039674"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab",
    "assignerShortName": "f5",
    "cveId": "CVE-2017-0303",
    "datePublished": "2017-10-27T14:00:00.000Z",
    "dateReserved": "2016-11-09T00:00:00.000Z",
    "dateUpdated": "2024-09-16T23:00:41.490Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted