Vulnerabilities > CVE-2016-6876 - Resource Management Errors vulnerability in F5 products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

CWE-399

nessus

NVD

Published: 2016-09-07

Updated: 2019-06-06

Summary

The RESOLV::lookup iRule command in F5 BIG-IP LTM, APM, ASM, and Link Controller 10.2.1 through 10.2.4, 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.0.0 before HF3; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.0.0 before HF3; BIG-IP Analytics 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.0.0 before HF3; BIG-IP DNS 12.0.0 before HF3; BIG-IP Edge Gateway, WebAccelerator, and WOM 10.2.1 through 10.2.4 and 11.2.1; BIG-IP GTM 10.2.1 through 10.2.4, 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, and 11.6.x before 11.6.1; and BIG-IP PSM 10.2.1 through 10.2.4 and 11.4.0 through 11.4.1 allows remote DNS servers to cause a denial of service (CPU consumption or Traffic Management Microkernel crash) via a crafted PTR response.

Vulnerable Configurations

Part	Description	Count
Application	F5 F5 BIG IP Local Traffic Manager 10.2.2 F5 BIG IP Local Traffic Manager 11.2.1 F5 BIG IP Local Traffic Manager 12.0.0 F5 BIG IP Local Traffic Manager 10.2.1 F5 BIG IP Local Traffic Manager 10.2.3 F5 BIG IP Local Traffic Manager 11.4.1 F5 BIG IP Local Traffic Manager 11.5.4 F5 BIG IP Local Traffic Manager 11.6.0 F5 BIG IP Local Traffic Manager 11.5.1 F5 BIG IP Local Traffic Manager 11.5.2 F5 BIG IP Local Traffic Manager 10.2.4 F5 BIG IP Local Traffic Manager 11.5.3 F5 BIG IP Local Traffic Manager 11.5.0 F5 BIG IP Local Traffic Manager 11.4.0 F5 BIG IP Webaccelerator 10.2.3 F5 BIG IP Webaccelerator 10.2.2 F5 BIG IP Webaccelerator 11.2.1 F5 BIG IP Webaccelerator 10.2.1 F5 BIG IP Webaccelerator 10.2.4 F5 BIG IP Application Acceleration Manager 11.5.2 F5 BIG IP Application Acceleration Manager 12.0.0 F5 BIG IP Application Acceleration Manager 11.4.1 F5 BIG IP Application Acceleration Manager 11.5.1 F5 BIG IP Application Acceleration Manager 11.5.4 F5 BIG IP Application Acceleration Manager 11.5.3 F5 BIG IP Application Acceleration Manager 11.6.0 F5 BIG IP Application Acceleration Manager 11.5.0 F5 BIG IP Application Acceleration Manager 11.4.0 F5 BIG IP Global Traffic Manager 10.2.4 F5 BIG IP Global Traffic Manager 11.4.0 F5 BIG IP Global Traffic Manager 11.5.1 F5 BIG IP Global Traffic Manager 11.5.4 F5 BIG IP Global Traffic Manager 11.6.0 F5 BIG IP Global Traffic Manager 11.4.1 F5 BIG IP Global Traffic Manager 10.2.2 F5 BIG IP Global Traffic Manager 11.2.1 F5 BIG IP Global Traffic Manager 10.2.1 F5 BIG IP Global Traffic Manager 11.5.2 F5 BIG IP Global Traffic Manager 10.2.3 F5 BIG IP Global Traffic Manager 11.5.0 F5 BIG IP Global Traffic Manager 11.5.3 F5 BIG IP Link Controller 10.2.4 F5 BIG IP Link Controller 10.2.3 F5 BIG IP Link Controller 11.4.0 F5 BIG IP Link Controller 11.5.3 F5 BIG IP Link Controller 11.5.1 F5 BIG IP Link Controller 11.5.2 F5 BIG IP Link Controller 10.2.1 F5 BIG IP Link Controller 11.4.1 F5 BIG IP Link Controller 11.5.0 F5 BIG IP Link Controller 11.6.0 F5 BIG IP Link Controller 11.5.4 F5 BIG IP Link Controller 10.2.2 F5 BIG IP Link Controller 11.2.1 F5 BIG IP Link Controller 12.0.0 F5 BIG IP Advanced Firewall Manager 11.5.4 F5 BIG IP Advanced Firewall Manager 11.5.2 F5 BIG IP Advanced Firewall Manager 11.6.0 F5 BIG IP Advanced Firewall Manager 11.4.1 F5 BIG IP Advanced Firewall Manager 11.5.0 F5 BIG IP Advanced Firewall Manager 11.5.1 F5 BIG IP Advanced Firewall Manager 12.0.0 F5 BIG IP Advanced Firewall Manager 11.5.3 F5 BIG IP Advanced Firewall Manager 11.4.0 F5 BIG IP Protocol Security Module 10.2.1 F5 BIG IP Protocol Security Module 10.2.4 F5 BIG IP Protocol Security Module 11.4.1 F5 BIG IP Protocol Security Module 11.4.0 F5 BIG IP Protocol Security Module 10.2.2 F5 BIG IP Protocol Security Module 10.2.3 F5 BIG IP WAN Optimization Manager 10.2.3 F5 BIG IP WAN Optimization Manager 11.2.1 F5 BIG IP WAN Optimization Manager 10.2.2 F5 BIG IP WAN Optimization Manager 10.2.4 F5 BIG IP WAN Optimization Manager 10.2.1 F5 BIG IP Application Security Manager 10.2.3 F5 BIG IP Application Security Manager 11.5.1 F5 BIG IP Application Security Manager 11.6.0 F5 BIG IP Application Security Manager 11.4.0 F5 BIG IP Application Security Manager 11.4.1 F5 BIG IP Application Security Manager 10.2.2 F5 BIG IP Application Security Manager 10.2.4 F5 BIG IP Application Security Manager 10.2.1 F5 BIG IP Application Security Manager 11.5.3 F5 BIG IP Application Security Manager 11.5.0 F5 BIG IP Application Security Manager 11.5.4 F5 BIG IP Application Security Manager 12.0.0 F5 BIG IP Application Security Manager 11.5.2 F5 BIG IP Application Security Manager 11.2.1 F5 BIG IP Policy Enforcement Manager 11.5.2 F5 BIG IP Policy Enforcement Manager 11.5.0 F5 BIG IP Policy Enforcement Manager 12.0.0 F5 BIG IP Policy Enforcement Manager 11.4.0 F5 BIG IP Policy Enforcement Manager 11.5.3 F5 BIG IP Policy Enforcement Manager 11.4.1 F5 BIG IP Policy Enforcement Manager 11.5.4 F5 BIG IP Policy Enforcement Manager 11.6.0 F5 BIG IP Policy Enforcement Manager 11.5.1 F5 BIG IP Domain Name System 12.0.0 F5 BIG IP Analytics 11.4.1 F5 BIG IP Analytics 11.6.0 F5 BIG IP Analytics 11.2.1 F5 BIG IP Analytics 11.5.4 F5 BIG IP Analytics 11.5.2 F5 BIG IP Analytics 12.0.0 F5 BIG IP Analytics 11.5.1 F5 BIG IP Analytics 11.4.0 F5 BIG IP Analytics 11.5.3 F5 BIG IP Analytics 11.5.0 F5 BIG IP Edge Gateway 11.2.1 F5 BIG IP Edge Gateway 10.2.2 F5 BIG IP Edge Gateway 10.2.4 F5 BIG IP Edge Gateway 10.2.1 F5 BIG IP Edge Gateway 10.2.3 F5 BIG IP Access Policy Manager 10.2.4 F5 BIG IP Access Policy Manager 11.5.2 F5 BIG IP Access Policy Manager 11.5.0 F5 BIG IP Access Policy Manager 12.0.0 F5 BIG IP Access Policy Manager 11.5.1 F5 BIG IP Access Policy Manager 11.2.1 F5 BIG IP Access Policy Manager 10.2.1 F5 BIG IP Access Policy Manager 11.5.3 F5 BIG IP Access Policy Manager 11.4.0 F5 BIG IP Access Policy Manager 10.2.3 F5 BIG IP Access Policy Manager 10.2.2 F5 BIG IP Access Policy Manager 11.5.4 F5 BIG IP Access Policy Manager 11.6.0 F5 BIG IP Access Policy Manager 11.4.1	128

Common Weakness Enumeration (CWE)

CWE-399 - Resource Management Errors

Nessus

NASL family	F5 Networks Local Security Checks
NASL id	F5_BIGIP_SOL52638558.NASL
description	A specially crafted reply to DNS queries from RESOLV::lookup may consume excess system resources or possibly lead to a crash and failover. (CVE-2016-6876)
last seen	2020-06-01
modified	2020-06-02
plugin id	93239
published	2016-08-31
reporter	This script is Copyright (C) 2016-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/93239
title	F5 Networks BIG-IP : RESOLV::lookup iRule command vulnerability (K52638558)

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Nessus

References