PT-2019-18201 · F5 · F5 Big-Ip

Published 2019-05-03 · Updated 2023-02-16 · CVE-2019-6619

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 12.1.0 through 12.1.4 F5 BIG-IP versions 13.0.0 through 13.1.1.4 F5 BIG-IP versions 14.0.0 through 14.1.0.1

Description The Traffic Management Microkernel (TMM) may restart when a virtual server has an HTTP/2 profile with Application Layer Protocol Negotiation (ALPN) enabled and it processes traffic where the ALPN extension size is zero.

Recommendations For versions 12.1.0 through 12.1.4, consider disabling the ALPN extension to prevent TMM restarts until a patch is available. For versions 13.0.0 through 13.1.1.4, consider disabling the ALPN extension to prevent TMM restarts until a patch is available. For versions 14.0.0 through 14.1.0.1, consider disabling the ALPN extension to prevent TMM restarts until a patch is available.

Fix

Related Identifiers

CVE-2019-6619

Affected Products

F5 Big-Ip

References · 5

• https://osv.dev/vulnerability/CVE-2019-6619 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6619 · Security Note
• https://support.f5.com/csp/article/K94563344 · Vendor Advisory
• https://t.me/cvenotify/44433 · Telegram Post
• http://securityfocus.com/bid/108190 · Note