K97241515 : BIG-IP APM DTLS vulnerability CVE-2019-6596

Security Advisory Description

When processing fragmented ClientHello messages in a DTLS session TMM may corrupt memory eventually leading to a crash. Only systems offering DTLS connections via APM are impacted. (CVE-2019-6596)

Impact

This vulnerability may allow an attacker to cause a denial-of-service (DoS) on the affected BIG-IP APM system. Only BIG-IP APM systems with DTLS profile enabled are affected.