CVE-2017-6161

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-10-27 · updated 2026-06-17
Weakness: CWE-400

Description

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1, when ConfigSync is configured, attackers on adjacent networks may be able to bypass the TLS protections usually used to encrypted and authenticate connections to mcpd. This vulnerability may allow remote attackers to cause a denial-of-service (DoS) attack via resource exhaustion.

Affected products

F5 BIG-IP APM: from 11.5.0 through 11.5.4; 11.2.1, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 (+1)
BIG-IP: from 11.5.0 through 11.5.4; 11.2.1, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 (+1)
F5 Networks, Inc. BIG-IP (AAM): from 11.5.0 through 11.5.4; 11.2.1, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 (+1)
BIG-IP ASM: from 11.5.0 through 11.5.4; 11.2.1, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 (+1)
F5 BIG-IP DNS: from 11.4.0 through 11.5.4; 11.2.1, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 (+1)
F5 Big-Ip Edge Gateway: 11.2.1, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2 (+9)
F5 Big-Ip Global Traffic Manager: 11.2.1, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2 (+8)
F5 Big-Ip Link Controller: from 11.5.0 through 11.5.4; 11.2.1, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 (+1)
F5 BIG-IP (LTM): from 11.5.0 through 11.5.4; 11.2.1, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 (+1)
F5 Networks, Inc. BIG-IP (PEM): from 11.5.0 through 11.5.4; 11.2.1, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 (+1)
F5 Big-Ip Webaccelerator: 11.2.1, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2 (+10)

References

Get alerted when CVE-2017-6161 or the next vulnerability affects your stack