Lucene search

F5CVE-2019-6680

HistoryDec 23, 2019 - 6:15 p.m.

CVE-2019-6680

2019-12-2318:15:11

web.nvd.nist.gov

cve-2019-6680

big-ip

hardware appliances

nvd

traffic processing

virtual server

fastl4

vip on vip

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

42.5%

JSON

On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5, while processing traffic through a standard virtual server that targets a FastL4 virtual server (VIP on VIP), hardware appliances may stop responding.

Affected configurations

Nvd

Node

f5big-ip_access_policy_managerRange11.5.2–11.6.5.1

f5big-ip_access_policy_managerRange12.1.0–12.1.5

f5big-ip_access_policy_managerRange13.1.0–13.1.3

f5big-ip_access_policy_managerRange14.0.0–14.0.1.1

f5big-ip_access_policy_managerRange14.1.0–14.1.2.1

f5big-ip_access_policy_managerRange15.0.0–15.0.1.1

f5big-ip_advanced_firewall_managerRange11.5.2–11.6.5.1

f5big-ip_advanced_firewall_managerRange12.1.0–12.1.5

f5big-ip_advanced_firewall_managerRange13.1.0–13.1.3

f5big-ip_advanced_firewall_managerRange14.0.0–14.0.1.1

f5big-ip_advanced_firewall_managerRange14.1.0–14.1.2.1

f5big-ip_advanced_firewall_managerRange15.0.0–15.0.1.1

f5big-ip_analyticsRange11.5.2–11.6.5.1

f5big-ip_analyticsRange12.1.0–12.1.5

f5big-ip_analyticsRange13.1.0–13.1.3

f5big-ip_analyticsRange14.0.0–14.0.1.1

f5big-ip_analyticsRange14.1.0–14.1.2.1

f5big-ip_analyticsRange15.0.0–15.0.1.1

f5big-ip_application_acceleration_managerRange11.5.2–11.6.5.1

f5big-ip_application_acceleration_managerRange12.1.0–12.1.5

f5big-ip_application_acceleration_managerRange13.1.0–13.1.3

f5big-ip_application_acceleration_managerRange14.0.0–14.0.1.1

f5big-ip_application_acceleration_managerRange14.1.0–14.1.2.1

f5big-ip_application_acceleration_managerRange15.0.0–15.0.1.1

f5big-ip_application_security_managerRange11.5.2–11.6.5.1

f5big-ip_application_security_managerRange12.1.0–12.1.5

f5big-ip_application_security_managerRange13.1.0–13.1.3

f5big-ip_application_security_managerRange14.0.0–14.0.1.1

f5big-ip_application_security_managerRange14.1.0–14.1.2.1

f5big-ip_application_security_managerRange15.0.0–15.0.1.1

f5big-ip_domain_name_systemRange11.5.2–11.6.5.1

f5big-ip_domain_name_systemRange12.1.0–12.1.5

f5big-ip_domain_name_systemRange13.1.0–13.1.3

f5big-ip_domain_name_systemRange14.0.0–14.0.1.1

f5big-ip_domain_name_systemRange14.1.0–14.1.2.1

f5big-ip_domain_name_systemRange15.0.0–15.0.1.1

f5big-ip_fraud_protection_serviceRange11.5.2–11.6.5.1

f5big-ip_fraud_protection_serviceRange12.1.0–12.1.5

f5big-ip_fraud_protection_serviceRange13.1.0–13.1.3

f5big-ip_fraud_protection_serviceRange14.0.0–14.0.1.1

f5big-ip_fraud_protection_serviceRange14.1.0–14.1.2.1

f5big-ip_fraud_protection_serviceRange15.0.0–15.0.1.1

f5big-ip_global_traffic_managerRange11.5.2–11.6.5.1

f5big-ip_global_traffic_managerRange12.1.0–12.1.5

f5big-ip_global_traffic_managerRange13.1.0–13.1.3

f5big-ip_global_traffic_managerRange14.0.0–14.0.1.1

f5big-ip_global_traffic_managerRange14.1.0–14.1.2.1

f5big-ip_global_traffic_managerRange15.0.0–15.0.1.1

f5big-ip_link_controllerRange11.5.2–11.6.5.1

f5big-ip_link_controllerRange12.1.0–12.1.5

f5big-ip_link_controllerRange13.1.0–13.1.3

f5big-ip_link_controllerRange14.0.0–14.0.1.1

f5big-ip_link_controllerRange14.1.0–14.1.2.1

f5big-ip_link_controllerRange15.0.0–15.0.1.1

f5big-ip_local_traffic_managerRange11.5.2–11.6.5.1

f5big-ip_local_traffic_managerRange12.1.0–12.1.5

f5big-ip_local_traffic_managerRange13.1.0–13.1.3

f5big-ip_local_traffic_managerRange14.0.0–14.0.1.1

f5big-ip_local_traffic_managerRange14.1.0–14.1.2.1

f5big-ip_local_traffic_managerRange15.0.0–15.0.1.1

f5big-ip_policy_enforcement_managerRange11.5.2–11.6.5.1

f5big-ip_policy_enforcement_managerRange12.1.0–12.1.5

f5big-ip_policy_enforcement_managerRange13.1.0–13.1.3

f5big-ip_policy_enforcement_managerRange14.0.0–14.0.1.1

f5big-ip_policy_enforcement_managerRange14.1.0–14.1.2.1

f5big-ip_policy_enforcement_managerRange15.0.0–15.0.1.1

VendorProductVersionCPE
f5big-ip_access_policy_manager*cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
f5big-ip_advanced_firewall_manager*cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
f5big-ip_analytics*cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*
f5big-ip_application_acceleration_manager*cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*
f5big-ip_application_security_manager*cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
f5big-ip_domain_name_system*cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*
f5big-ip_fraud_protection_service*cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*
f5big-ip_global_traffic_manager*cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
f5big-ip_link_controller*cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*
f5big-ip_local_traffic_manager*cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
f5	big-ip_access_policy_manager	*	cpe:2.3:a:f5:big-ip_access_policy_manager::::::::
f5	big-ip_advanced_firewall_manager	*	cpe:2.3:a:f5:big-ip_advanced_firewall_manager::::::::
f5	big-ip_analytics	*	cpe:2.3:a:f5:big-ip_analytics::::::::
f5	big-ip_application_acceleration_manager	*	cpe:2.3:a:f5:big-ip_application_acceleration_manager::::::::
f5	big-ip_application_security_manager	*	cpe:2.3:a:f5:big-ip_application_security_manager::::::::
f5	big-ip_domain_name_system	*	cpe:2.3:a:f5:big-ip_domain_name_system::::::::
f5	big-ip_fraud_protection_service	*	cpe:2.3:a:f5:big-ip_fraud_protection_service::::::::
f5	big-ip_global_traffic_manager	*	cpe:2.3:a:f5:big-ip_global_traffic_manager::::::::
f5	big-ip_link_controller	*	cpe:2.3:a:f5:big-ip_link_controller::::::::
f5	big-ip_local_traffic_manager	*	cpe:2.3:a:f5:big-ip_local_traffic_manager::::::::

Rows per page:

1-10 of 111

CNA Affected

[
  {
    "product": "BIG-IP",
    "vendor": "F5",
    "versions": [
      {
        "status": "affected",
        "version": "15.0.0-15.0.1"
      },
      {
        "status": "affected",
        "version": "14.1.0-14.1.2"
      },
      {
        "status": "affected",
        "version": "14.0.0-14.0.1"
      },
      {
        "status": "affected",
        "version": "13.1.0-13.1.3.2"
      },
      {
        "status": "affected",
        "version": "12.1.0-12.1.5"
      },
      {
        "status": "affected",
        "version": "11.5.2-11.6.5"
      }
    ]
  }
]

References

support.f5.com/csp/article/K53183580

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

42.5%

JSON

Related for CVE-2019-6680