CVE-2016-7468
Last modified
CVE-2016-7468 is a vulnerability of currently unknown severity. An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic. This vulnerability affects virtual servers associated with TCP profiles when the BIG-IP system's tm.tcpprogressive db variable value is set to non-default setting "enabled". EPSS estimates a 1.77% chance of exploitation in the next 30 days.
Description
An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic. This vulnerability affects virtual servers associated with TCP profiles when the BIG-IP system's tm.tcpprogressive db variable value is set to non-default setting "enabled". The default value for the tm.tcpprogressive db variable is "negotiate". An attacker may be able to disrupt traffic or cause the BIG-IP system to fail over to another device in the device group.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| F5 | Big-Ip Local Traffic Manager | 11.4.0 |
| F5 | Big-Ip Local Traffic Manager | 11.4.1 |
| F5 | Big-Ip Local Traffic Manager | 11.5.0 |
| F5 | Big-Ip Local Traffic Manager | 11.5.1 |
| F5 | Big-Ip Local Traffic Manager | 11.5.2 |
| F5 | Big-Ip Local Traffic Manager | 11.5.3 |
| F5 | Big-Ip Local Traffic Manager | 11.5.4 |
| F5 | Big-Ip Application Acceleration Manager | 11.4.0 |
| F5 | Big-Ip Application Acceleration Manager | 11.4.1 |
| F5 | Big-Ip Application Acceleration Manager | 11.5.0 |
| F5 | Big-Ip Application Acceleration Manager | 11.5.1 |
| F5 | Big-Ip Application Acceleration Manager | 11.5.2 |
| F5 | Big-Ip Application Acceleration Manager | 11.5.3 |
| F5 | Big-Ip Application Acceleration Manager | 11.5.4 |
| F5 | Big-Ip Advanced Firewall Manager | 11.4.0 |
| F5 | Big-Ip Advanced Firewall Manager | 11.4.1 |
| F5 | Big-Ip Advanced Firewall Manager | 11.5.0 |
| F5 | Big-Ip Advanced Firewall Manager | 11.5.1 |
| F5 | Big-Ip Advanced Firewall Manager | 11.5.2 |
| F5 | Big-Ip Advanced Firewall Manager | 11.5.3 |
| F5 | Big-Ip Advanced Firewall Manager | 11.5.4 |
| F5 | Big-Ip Analytics | 11.4.0 |
| F5 | Big-Ip Analytics | 11.4.1 |
| F5 | Big-Ip Analytics | 11.5.0 |
| F5 | Big-Ip Analytics | 11.5.1 |
| F5 | Big-Ip Analytics | 11.5.2 |
| F5 | Big-Ip Analytics | 11.5.3 |
| F5 | Big-Ip Analytics | 11.5.4 |
| F5 | Big-Ip Access Policy Manager | 11.4.0 |
| F5 | Big-Ip Access Policy Manager | 11.4.1 |
| F5 | Big-Ip Access Policy Manager | 11.5.0 |
| F5 | Big-Ip Access Policy Manager | 11.5.1 |
| F5 | Big-Ip Access Policy Manager | 11.5.2 |
| F5 | Big-Ip Access Policy Manager | 11.5.3 |
| F5 | Big-Ip Access Policy Manager | 11.5.4 |
| F5 | Big-Ip Application Security Manager | 11.4.0 |
| F5 | Big-Ip Application Security Manager | 11.4.1 |
| F5 | Big-Ip Application Security Manager | 11.5.0 |
| F5 | Big-Ip Application Security Manager | 11.5.1 |
| F5 | Big-Ip Application Security Manager | 11.5.2 |
| F5 | Big-Ip Application Security Manager | 11.5.3 |
| F5 | Big-Ip Application Security Manager | 11.5.4 |
| F5 | Big-Ip Global Traffic Manager | 11.4.0 |
| F5 | Big-Ip Global Traffic Manager | 11.4.1 |
| F5 | Big-Ip Global Traffic Manager | 11.5.0 |
| F5 | Big-Ip Global Traffic Manager | 11.5.1 |
| F5 | Big-Ip Global Traffic Manager | 11.5.2 |
| F5 | Big-Ip Global Traffic Manager | 11.5.3 |
| F5 | Big-Ip Global Traffic Manager | 11.5.4 |
| F5 | Big-Ip Link Controller | 11.4.0 |
Showing 50 of 65 affected configurations. See NVD for the full list.
References
- http://www.securityfocus.com/bid/97119Third Party Advisory, VDB Entry
- https://support.f5.com/csp/article/K13053402Vendor Advisory
- http://www.securityfocus.com/bid/97119Third Party Advisory, VDB Entry
- https://support.f5.com/csp/article/K13053402Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-7468?
How severe is CVE-2016-7468?
How do I fix CVE-2016-7468?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-7462The Suite REST API in VMware vRealize Operations (aka vROps)…
- CVE-2016-7463Cross-site scripting (XSS) vulnerability in the Host Client …
- CVE-2016-7464Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2016-7465Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2016-7466Memory leak in the usb_xhci_exit function in hw/usb/hcd-xhci…6
- CVE-2016-7467The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 …
- CVE-2016-7469A stored cross-site scripting (XSS) vulnerability in the Con…
- CVE-2016-7470Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2016-7471Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2016-7472F5 BIG-IP ASM version 12.1.0 - 12.1.1 may allow remote attac…
- CVE-2016-7473Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2016-7474In some cases the MCPD binary cache in F5 BIG-IP devices may…
Are you affected by CVE-2016-7468?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST