PT-2019-18251 · F5 · Big-Ip

Published 2019-11-27 · Updated 2020-08-24 · CVE-2019-6669

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 15.0.0 through 15.0.1 F5 BIG-IP versions 14.1.0 through 14.1.2 F5 BIG-IP versions 14.0.0 through 14.0.1 F5 BIG-IP versions 13.1.0 through 13.1.3.1 F5 BIG-IP versions 12.1.0 through 12.1.5 F5 BIG-IP versions 11.5.1 through 11.6.5.1

Description The issue is related to undisclosed traffic flow that may cause the Traffic Management Microkernel (TMM) to restart under certain circumstances.

Recommendations For versions 15.0.0 through 15.0.1, update to a fixed version to prevent TMM restarts due to undisclosed traffic flow. For versions 14.1.0 through 14.1.2, update to a fixed version to prevent TMM restarts due to undisclosed traffic flow. For versions 14.0.0 through 14.0.1, update to a fixed version to prevent TMM restarts due to undisclosed traffic flow. For versions 13.1.0 through 13.1.3.1, update to a fixed version to prevent TMM restarts due to undisclosed traffic flow. For versions 12.1.0 through 12.1.5, update to a fixed version to prevent TMM restarts due to undisclosed traffic flow. For versions 11.5.1 through 11.6.5.1, update to a fixed version to prevent TMM restarts due to undisclosed traffic flow.

Fix

Related Identifiers

CVE-2019-6669

Affected Products

Big-Ip

References · 3

• https://support.f5.com/csp/article/K11447758 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6669 · Security Note
• https://osv.dev/vulnerability/CVE-2019-6669 · Vendor Advisory