F5 BIG-IP Malformed SPDY/HTTP/2 Request Vulnerability

CVE-2017-6155 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or HTTP/2 requests may result in a disruption of service to TMM. Data plane is only exposed when a SPDY or HTTP/2 profile is attached to a virtual server. There is no control plane exposure.

Learn more about our Cis Benchmark Audit For F5.