All vulnerabilities

Servers and applications

CVE-2017-6141

In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 through 12.1.2, certain values in a TLS abbreviated handshake when using a client SSL profile with the Session Ticket option enabled may cause disruption of service to the Traffic Management Microkernel (TMM). The Session Ticket option is disabled by default.

Severity
Medium 5.9
Published
20 Oct 2017
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
1.1% in the next 30 daysHigher than 65% of CVEs. EPSS by FIRST, 11 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_access_policy_manager
  • Version 12.1.0
  • Version 12.1.1
  • Version 12.1.2
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_local_traffic_manager
  • Version 12.1.0
  • Version 12.1.1
  • Version 12.1.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-6141
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-6141