| Package | Affected versions | Patched versions |
|---|---|---|
| big-ip access policy manager | = 11.6.0= 11.6.1= 12.0.0= 12.1.0= 12.1.1= 12.1.2 | |
| big-ip advanced firewall manager | = 11.6.0= 11.6.1= 12.0.0= 12.1.0= 12.1.1= 12.1.2 | |
| big-ip application acceleration manager | = 11.6.0= 11.6.1= 12.0.0= 12.1.0= 12.1.1= 12.1.2 | |
| big-ip application security manager | = 11.6.0= 11.6.1= 12.0.0= 12.1.0= 12.1.1= 12.1.2 | |
| big-ip link controller | = 11.6.0= 11.6.1= 12.0.0= 12.1.0= 12.1.1= 12.1.2 | |
| big-ip local traffic manager | = 11.6.0= 11.6.1= 12.0.0= 12.1.0= 12.1.1= 12.1.2 | |
| big-ip policy enforcement manager | = 11.6.0= 11.6.1= 12.0.0= 12.1.0= 12.1.1= 12.1.2 | |
| big-ip websafe | = 1.0.0 |
F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 are vulnerable to a denial of service attack when the MPTCP option is enabled on a virtual server. Data plane is vulnerable when using the MPTCP option of a TCP profile. There is no control plane exposure. An attacker may be able to disrupt services by causing TMM to restart hence temporarily failing to process traffic.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free