CVE-2017-0303

mediumPriorität · verfolgen · 31EPSS 0.027 · 86. PerzentilEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

2.66% (86th) EPSS

CVSS 5 · medium

Is it mine?

187 products

Prüfe deine Angriffsfläche

Who says so?

3 sources

cnnvd · enisa_euvd · fstec_bdu

EPSS · bewertet 2026-10-27

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 11.6.1, under limited circumstances connections handled by a Virtual Server with an associated SOCKS profile may not be properly cleaned up, potentially leading to resource starvation. Connections may be left in the connection table which then can only be removed by restarting TMM. Over time this may lead to the BIG-IP being unable to process further connections.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–7.5

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 2.9

v3.07.5highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6

v3.06.9mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.17.5highAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-459USprimärCWE-399US

betroffene Produkte (187)

Betroffene Produkte und Versionsbereiche.

F5 Networks, Inc. BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe≤ 13.0.0enisa_euvdEU
F5 Networks, Inc. BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe≤ 11.5.1 - 11.6.1enisa_euvdEU
F5 Networks, Inc. BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe≤ 12.0.0 - 12.1.2enisa_euvdEU
F5 Networks, Inc. BIG-IP Access Policy Manager≤ 12.1.0fstec_bduRU
F5 Networks, Inc. BIG-IP Access Policy Manager≤ 11.6.0fstec_bduRU
F5 Networks, Inc. BIG-IP Access Policy Manager≤ 11.5.2fstec_bduRU
F5 Networks, Inc. BIG-IP Access Policy Manager≤ 11.5.5fstec_bduRU
F5 Networks, Inc. BIG-IP Access Policy Manager≤ 12.1.1fstec_bduRU
F5 Networks, Inc. BIG-IP Access Policy Manager≤ 11.6.1fstec_bduRU
F5 Networks, Inc. BIG-IP Access Policy Manager≤ 13.0.0fstec_bduRU
F5 Networks, Inc. BIG-IP Access Policy Manager≤ 11.5.0fstec_bduRU
F5 Networks, Inc. BIG-IP Access Policy Manager≤ 12.0.0fstec_bduRU
F5 Networks, Inc. BIG-IP Access Policy Manager≤ 11.5.4fstec_bduRU
F5 Networks, Inc. BIG-IP Access Policy Manager≤ 11.5.1fstec_bduRU
F5 Networks, Inc. BIG-IP Access Policy Manager≤ 12.1.2fstec_bduRU
F5 Networks, Inc. BIG-IP Access Policy Manager≤ 11.5.3fstec_bduRU
F5 Networks, Inc. BIG-IP Advanced Firewall Manager≤ 11.5.0fstec_bduRU
F5 Networks, Inc. BIG-IP Advanced Firewall Manager≤ 11.5.1fstec_bduRU
F5 Networks, Inc. BIG-IP Advanced Firewall Manager≤ 11.6.1fstec_bduRU
F5 Networks, Inc. BIG-IP Advanced Firewall Manager≤ 13.0.0fstec_bduRU

20 von 187 angezeigt

auch bekannt als (6)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu NVD CVE.org MITRE

veröffentlicht 2017-10-27geändert 2026-06-17

verwandt (309)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2017-17090US	high7.5	82.2% (100th)	Exploit	2017-12-02
An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7 and older. If the cha…
CVE-2025-31650US	high7.5	61.3% (99th)	Exploit	2025-04-28
Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request whic…
CVE-2021-39327US	medium5.3	71.7% (99th)	Exploit	2021-09-17
The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly accessible ~/db_backup_log.txt file which…
CVE-2018-18924US	high8.8	9.49% (95th)	Exploit	2018-11-04
The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml file with "#exec cmd" because rejected files remain on the serve…
CVE-2022-1552US	high8.8OT erhöht	17.0% (97th)	—	2022-08-31
A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, C…

+304 weitere

Referenzen (9)

Externe Belege — Patches, Meldungen, Analysen.

http://www.securitytracker.com/id/1039674 cnnvd
https://support.f5.com/csp/article/K30201296 cnnvd
https://www.securityfocus.com/bid/101612 cnnvd
http://www.securityfocus.com/bid/101612 enisa_euvd
http://www.securitytracker.com/id/1039674 enisa_euvd
https://support.f5.com/csp/article/K30201296 enisa_euvd
http://www.securityfocus.com/bid/101612Third Party AdvisoryVDB Entrynvd
http://www.securitytracker.com/id/1039674Third Party AdvisoryVDB Entrynvd

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan