F5 Networks BIG-IP : BIG-IP HTTP profile vulnerability (K19501795)

iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated HTTP profile, in specific circumstances, when the requests do not strictly conform to RFCs. CVE-2019-6631 Impact The BIG-IP system Traffic...

F5 Networks BIG-IP : TMM vulnerability (K95434410)

Undisclosed SSL traffic to a virtual server configured with a Client SSL profile may cause TMM to fail and restart. The Client SSL profile must have session tickets enabled and use DHE cipher suites to be affected. This only impacts the data plane, there is no impact to the control plane...

F5 Networks BIG-IP : TMM vulnerability (K72335002)

Undisclosed traffic sent to BIG-IP iSession virtual server may cause the Traffic Management Microkernel TMM to restart, resulting in a Denial-of-Service DoS. CVE-2019-6623 Impact A remote attacker may be able to perform a denial-of-service DoS attack on a BIG-IP system by causing the TMM process ...

F5 Networks BIG-IP : TMM vulnerability (K07127032)

An undisclosed traffic pattern sent to a BIG-IP UDP virtual server may lead to a denial-of-service DoS, if that virtual server is configured with a Protocol setting of UDP and has an associated UDP Protocol Profile with the Datagram LB option enabled. CVE-2019-6624 Impact A remote attacker may be...

CVE-2019-6619

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, the Traffic Management Microkernel TMM may restart when a virtual server has an HTTP/2 profile with Application Layer Protocol Negotiation ALPN enabled and it processes traffic where the ALPN extension size is zero...

Code injection

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, the Traffic Management Microkernel TMM may restart when a virtual server has an HTTP/2 profile with Application Layer Protocol Negotiation ALPN enabled and it processes traffic where the ALPN extension size is zero...

CVE-2019-6619

The CVE-2019-6619 issue affects BIG-IP TMM where an HTTP/2 profile with ALPN enabled can trigger a TMM restart when processing traffic with a zero-length ALPN extension. Affected versions include BIG-IP 12.1.0–12.1.4, 13.0.0–13.1.1.4, and 14.0.0–14.1.0.1. The impact is a core dump and TMM restart...

CVE-2019-6611

When BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8 are processing certain rare data sequences occurring in PPTP VPN traffic, the BIG-IP system may execute incorrect logic. The TMM may restart and produce a core file as a result of this condition. The...

CVE-2019-6612

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, DNS query TCP connections that are aborted before receiving a response from a DNS cache may cause TMM to restart...

Code injection

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, DNS query TCP connections that are aborted before receiving a response from a DNS cache may cause TMM to restart...

CVE-2019-6612

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, DNS query TCP connections that are aborted before receiving a response from a DNS cache may cause TMM to restart...

CVE-2019-6612

CVE-2019-6612 affects F5 BIG-IP DNS Cache. A DNS query TCP connection that is aborted before a DNS cache response can trigger TMM restart, impacting BIG-IP TCP/DNS profiles with DNS Cache enabled. Affected versions include 11.5.2–11.5.8, 11.6.1–11.6.3.4, 12.1.0–12.1.4, 13.0.0–13.1.1.4, and 14.0.0...

CVE-2019-6611

The CVE-2019-6611 issue affects F5 BIG-IP CGNAT with PPTP profiles. Affected BIG-IP versions: 11.5.2–11.5.8, 11.6.1–11.6.3.4, 12.1.0–12.1.4, 13.0.0–13.1.1.4, 14.0.0–14.1.0.1. Root cause: processing rare PPTP data sequences may cause TMM to restart and emit a core file. Consequence: temporary traf...

PT-2019-18201 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 12.1.0 through 12.1.4 F5 BIG-IP versions 13.0.0 through 13.1.1.4 F5 BIG-IP versions 14.0.0 through 14.1.0.1 Description: The Traffic Management Microkernel TMM may restart when a virtual server has an HTTP/2 profile with...

PT-2019-18194 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 11.5.2 through 11.5.8 F5 BIG-IP versions 11.6.1 through 11.6.3.4 F5 BIG-IP versions 12.1.0 through 12.1.4 F5 BIG-IP versions 13.0.0 through 13.1.1.4 F5 BIG-IP versions 14.0.0 through 14.1.0.1 Description: The issue occurs...

PT-2019-18193 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 11.5.2 through 11.5.8 F5 BIG-IP versions 11.6.1 through 11.6.3.4 F5 BIG-IP versions 12.1.0 through 12.1.4 F5 BIG-IP versions 13.0.0 through 13.1.1.4 F5 BIG-IP versions 14.0.0 through 14.1.0.1 Description: The issue occurs...

F5 Networks BIG-IP : DNS vulnerability (K24401914)

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, DNS query TCP connections that are aborted before receiving a response from a DNS cache may cause TMM to restart. CVE-2019-6612 Impact A BIG-IP virtual server associated with a TCP and DNS profile that...

F5 Networks BIG-IP : CGNAT/PPTP vulnerability (K47527163)

When processing certain rare data sequences occurring in PPTP VPN traffic, the BIG-IP system may execute incorrect logic. The TMM may restart and produce a core file as a result of this condition. The BIG-IP system provisioned with the CGNAT module and configured with a virtual server using a PPT...

F5 Networks BIG-IP : HTTP/2 ALPN vulnerability (K94563344)

The Traffic Management Microkernel TMMmay restart when a virtual server has an HTTP/2 profile with Application Layer Protocol Negotiation ALPNenabled and it processes traffic where the ALPN extension size is zero.CVE-2019-6619 Impact BIG-IP The Traffic Management Microkernel TMM generates a core...

F5 Networks BIG-IP : BIG-IP URL classification vulnerability (K42465020)

The BIG-IP system is vulnerable to a denial-of-service DoS attack when performing URL classification. CVE-2019-6610 Impact A remoteattacker may be able to disrupt services by causing the Traffic Management Microkernel TMM to restart. There is no exposure in the control plane. C Tenable Network...