CVE-2017-6128

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in F5 BIG-IP, Enterprise Manager, BIG-IQ, and iWorkflow.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
F5 Networks, Inc.	BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WebSafe	varies depending on product - see https://support.f5.com/csp/article/K92140924 for table
F5 Networks, Inc.	Enterprise Manager	varies depending on product - see https://support.f5.com/csp/article/K92140924 for table
F5 Networks, Inc.	BIG-IQ Cloud, Device, Security, ADC, Centralized Management, Cloud and Orchestration	varies depending on product - see https://support.f5.com/csp/article/K92140924 for table
F5 Networks, Inc.	iWorkflow	varies depending on product - see https://support.f5.com/csp/article/K92140924 for table

References

http://www.securitytracker.com/id/1038362
http://www.securitytracker.com/id/1038363
https://support.f5.com/csp/article/K92140924Mitigation, Vendor Advisory
http://www.securitytracker.com/id/1038362
http://www.securitytracker.com/id/1038363
https://support.f5.com/csp/article/K92140924Mitigation, Vendor Advisory

Timeline

Published: May 1, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-61297.5In F5 BIG-IP APM software version 13.0.0 and 12.1.2, in some circumstances, APM tunneled VPN flows can cause a VPN/PPP connflow to be premat CVE-2017-61307.4F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) attack when deployed usin CVE-2017-61319.8In some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may contain a default administrative password w CVE-2017-61327.5In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2, 11.6.CVE-2017-61337.5In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, undisclo CVE-2017-61346.5In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, 12.1.0 - 12.1.2 and 11.CVE-2017-61357.5In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, a slow memory leak as a CVE-2017-61365.9In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.0.0 - 12.1.2, und CVE-2017-61375.9In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, CVE-2017-61387.5In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, mal CVE-2017-61395.9In F5 BIG-IP APM software version 13.0.0 and 12.1.2, under rare conditions, the BIG-IP APM system appends log details when responding to cli CVE-2017-61407.5On the BIG-IP 2000s, 2200s, 4000s, 4200v, i5600, i5800, i7600, i7800, i10600,i10800, and VIPRION 4450 blades, running version 11.5.0, 11.5.1