PT-2019-18172 · F5 · F5 Big-Ip Ltm

Publicado 2019-02-05 · Atualizado 2020-08-24 · CVE-2019-6590

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM versions 12.1.0 through 12.1.3.6 F5 BIG-IP LTM versions 13.0.0 through 13.0.1

Description The issue arises under certain conditions when the Traffic Management Microkernel (TMM) processes SSL Session ID Persistence traffic, leading to excessive resource consumption.

Recommendations For versions 12.1.0 through 12.1.3.6, consider restricting SSL Session ID Persistence traffic to minimize the risk of excessive resource consumption by the TMM. For versions 13.0.0 through 13.0.1, consider restricting SSL Session ID Persistence traffic to minimize the risk of excessive resource consumption by the TMM.

Correção

Identificadores relacionados

CVE-2019-6590

Produtos afetados

F5 Big-Ip Ltm

Referências · 4

• https://support.f5.com/csp/article/K55101404 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-6590 · Aviso do Fabricante
• http://securityfocus.com/bid/106942 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-6590 · Nota de Segurança