K55812535 : BIG-IP MRF Diameter vulnerability CVE-2019-6686

Security Advisory Description

The Traffic Management Microkernel (TMM) might stop responding after the total number of diameter connections and pending messages on a single virtual server has reached 32K. (CVE-2019-6686)

Impact

BIG-IP

This vulnerability affects only virtual servers associated with the message routing diameter profile. When the vulnerability is exploited, the Traffic Management Microkernel (TMM) creates a core file and restarts. As a result, the BIG-IP system fails to process traffic and fails over to its high availability (HA) peer, if configured.

BIG-IQ / Enterprise Manager / Traffix SDC

There is no impact; these F5 products are not affected by this vulnerability.