CVE-2016-5024

EPSS 1.8%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 1.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

03 Jan 2017Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Virtual servers in F5 BIG-IP systems 11.6.1 before 11.6.1 HF1 and 12.1.x before 12.1.2, when configured to parse RADIUS messages via an iRule, allow remote attackers to cause a denial of service (Traffic Management Microkernel restart) via crafted network traffic.

Affected products

F5 Networks · F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM

References

https://support.f5.com/csp/#/article/K92859602 http://www.securityfocus.com/bid/95228 http://www.securitytracker.com/id/1037510