CVE-2017-0303

CVE-2017-0303 describes a resource exhaustion vulnerability in various F5 BIG-IP products, including LTM, AAM, AFM, and others, across several software versions. Under specific circumstances, connections handled by a Virtual Server with an associated SOCKS profile may not be properly terminated, leading to a build-up of connections in the connection table. This can eventually cause the BIG-IP device to become unresponsive and unable to process new connections, requiring a restart of TMM to resolve. The vulnerability has a CVSSv3 score of 7.5 (HIGH), indicating a high impact on availability (A:H) with low attack complexity (AC:L) and no user interaction required (UI:N). It can be exploited remotely over the network (AV:N). Despite its severity, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant public attention.