PT-2019-18266 · F5 · F5 Big-Ip

Published 2019-12-23 · Updated 2020-08-24 · CVE-2019-6684

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.2 through 11.6.5.1 F5 BIG-IP versions 12.1.0 through 12.1.5 F5 BIG-IP versions 13.1.0 through 13.1.3.1 F5 BIG-IP versions 14.0.0 through 14.1.2.2 F5 BIG-IP versions 15.0.0 through 15.0.1.1

Description Under certain conditions, a multi-bladed BIG-IP Virtual Clustered Multiprocessing (vCMP) may drop broadcast packets when they are rebroadcast to the vCMP guest secondary blades. An attacker can leverage the fragmented broadcast IP packets to perform any type of fragmentation-based attack.

Recommendations For versions 11.5.2 through 11.6.5.1, update to a version outside of this range to resolve the issue. For versions 12.1.0 through 12.1.5, update to a version outside of this range to resolve the issue. For versions 13.1.0 through 13.1.3.1, update to a version outside of this range to resolve the issue. For versions 14.0.0 through 14.1.2.2, update to a version outside of this range to resolve the issue. For versions 15.0.0 through 15.0.1.1, update to a version outside of this range to resolve the issue.

Fix

Related Identifiers

CVE-2019-6684

Affected Products

F5 Big-Ip

References · 3

• https://osv.dev/vulnerability/CVE-2019-6684 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6684 · Security Note
• https://support.f5.com/csp/article/K95117754 · Vendor Advisory