Denial of service in F5 Networks products - CVE-2016-9253
Published: May 12, 2017
Vulnerability identifier: #VU6532
CSH Severity: Medium
CVSS v4: 8.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H]
CVE-ID: CVE-2016-9253
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote unauthenticated user to cause DoS conditions on the target system.
The weakness exists due to improper validation of user-supplied input. A remote attacker can submit a specially crafted websocket traffic and cause the affected server to crash.
Successful exploitation of the vulnerability may result in denial of service.
The weakness exists due to improper validation of user-supplied input. A remote attacker can submit a specially crafted websocket traffic and cause the affected server to crash.
Successful exploitation of the vulnerability may result in denial of service.
Affected software
BIG-IP WebSafe
BIG-IP LTM
BIG-IP AFM
BIG-IP Analytics
BIG-IP ASM
BIG-IP PEM
BIG-IP APM
BIG-IP AAM
BIG-IP Link Controller
BIG-IP DNS
BIG-IP LTM
BIG-IP AFM
BIG-IP Analytics
BIG-IP ASM
BIG-IP PEM
BIG-IP APM
BIG-IP AAM
BIG-IP Link Controller
BIG-IP DNS
How to mitigate CVE-2016-9253
Install update from vendor's website.