CVE-2017-6169

MEDIUM 6.8CVE-2017-6169 · Published 06/02/2018 · updated 17/06/2026

In short

CVE-2017-6169 is a MEDIUM (CVSS 6.8) vulnerability affecting big-ip policy enforcement manager (f5).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
big-ip policy enforcement manager f5	`= 11.6.0= 11.6.1= 11.6.2= 12.0.0= 12.1.0= 12.1.1= 12.1.2= 12.1.3= 13.0.0`	No fix yet

Description

In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Management Microkernel (TMM) to produce a core file when it receives malformed URLs during categorization.

References

securitytracker.com/id/1040332 · Third Party Advisory
support.f5.com/csp/article/K31404801 · Vendor Advisory

More vulnerabilities in big-ip policy enforcement manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

big-ip policy enforcement manager

= 11.6.0= 11.6.1= 11.6.2= 12.0.0= 12.1.0= 12.1.1= 12.1.2= 12.1.3= 13.0.0

No fix yet

More vulnerabilities in big-ip policy enforcement manager

See all →