K55101404 : TMM vulnerability CVE-2019-6590

Security Advisory Description

Under certain conditions, the TMM may consume excessive resources when processing SSL Session ID Persistence traffic. (CVE-2019-6590)

Impact

BIG-IP

This vulnerability may result as a denial-of-service (DOS) attack on the affected BIG-IP system when the system consumes excessive memory resources. This issue affects only BIG-IP systems provisioned with the LTM module. The affected BIG-IP system temporarily fails to process traffic as it recovers from a Traffic Management Microkernel (TMM) restart, and devices configured in a device group may fail over.

Enterprise Manager / BIG-IQ / iWorkflow / Traffix SDC

There is no impact for these F5 products as they are not affected by this vulnerability.