PT-2019-18187 · F5 · F5 Big-Ip

Publicado 2019-03-28 · Atualizado 2020-08-24 · CVE-2019-6605

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.1 through 11.5.8 F5 BIG-IP versions 11.6.1 through 11.6.3 F5 BIG-IP versions 12.0.x

Description The issue is related to an undisclosed sequence of packets received by an SSL virtual server and processed by an associated Client SSL or Server SSL profile, which may cause a denial of service.

Recommendations For F5 BIG-IP versions 11.5.1 through 11.5.8, update to a fixed version to resolve the issue. For F5 BIG-IP versions 11.6.1 through 11.6.3, update to a fixed version to resolve the issue. For F5 BIG-IP versions 12.0.x, update to a fixed version to resolve the issue.

Correção

Identificadores relacionados

CVE-2019-6605

Produtos afetados

F5 Big-Ip

Referências · 4

• https://support.f5.com/csp/article/K45353544 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-6605 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-6605 · Nota de Segurança
• http://securityfocus.com/bid/107629 · Nota