PT-2019-18193 · F5 · F5 Big-Ip
Published
2019-05-03
·
Updated
2023-02-03
·
CVE-2019-6611
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
F5 BIG-IP versions 11.5.2 through 11.5.8
F5 BIG-IP versions 11.6.1 through 11.6.3.4
F5 BIG-IP versions 12.1.0 through 12.1.4
F5 BIG-IP versions 13.0.0 through 13.1.1.4
F5 BIG-IP versions 14.0.0 through 14.1.0.1
Description
The issue occurs when the system processes certain rare data sequences in PPTP VPN traffic, leading to incorrect logic execution. This may cause the TMM to restart and produce a core file. The system is exposed to this issue when it is provisioned with the CGNAT module and configured with a virtual server using a PPTP profile.
Recommendations
For F5 BIG-IP versions 11.5.2 through 11.5.8, consider disabling the PPTP profile until a patch is available.
For F5 BIG-IP versions 11.6.1 through 11.6.3.4, consider disabling the PPTP profile until a patch is available.
For F5 BIG-IP versions 12.1.0 through 12.1.4, consider disabling the PPTP profile until a patch is available.
For F5 BIG-IP versions 13.0.0 through 13.1.1.4, consider disabling the PPTP profile until a patch is available.
For F5 BIG-IP versions 14.0.0 through 14.1.0.1, consider disabling the PPTP profile until a patch is available.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
F5 Big-Ip