K24401914 : DNS vulnerability CVE-2019-6612

Security Advisory Description

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, DNS query TCP connections that are aborted before receiving a response from a DNS cache may cause TMM to restart. (CVE-2019-6612)

Impact

A BIG-IP virtual server associated with a TCP and DNS profile that has DNS Cache enabled will be affected by this vulnerability. The affected BIG-IP system temporarily fails to process traffic as it recovers from a Traffic Management Microkernel (TMM) restart, and devices configured in a device group may fail over.