CVE-2017-0303

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-10-27 · updated 2026-06-17
Weakness: CWE-459

Description

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 11.6.1, under limited circumstances connections handled by a Virtual Server with an associated SOCKS profile may not be properly cleaned up, potentially leading to resource starvation. Connections may be left in the connection table which then can only be removed by restarting TMM. Over time this may lead to the BIG-IP being unable to process further connections.

Affected products

F5 BIG-IP APM: 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5 (+7)
BIG-IP: 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5 (+7)
F5 Networks, Inc. BIG-IP (AAM): 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5 (+7)
BIG-IP ASM: 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5 (+7)
F5 Big-Ip Link Controller: 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5 (+7)
F5 BIG-IP (LTM): 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5 (+7)
F5 Networks, Inc. BIG-IP (PEM): 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5 (+7)
F5 Big-Ip Websafe: 1.0.0

References

Get alerted when CVE-2017-0303 or the next vulnerability affects your stack