F5 BIG-IP Memory Disclosure Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A memory leakage vulnerability exists in F5 BIG-IP, which can be exploited by an attacker to cause a memory leakage, leading t...

CVE-2019-6669

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, undisclosed traffic flow may cause TMM to restart under some circumstances...

CVE-2019-6673

On versions 15.0.0-15.0.1 and 14.0.0-14.1.2, when the BIG-IP is configured in HTTP/2 Full Proxy mode, specifically crafted requests may cause a disruption of service provided by the Traffic Management Microkernel TMM...

CVE-2019-6667

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.1.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.5.1-11.6.5, under certain conditions, TMM may consume excessive resources when processing traffic for a Virtual Server with the FIX Financial Information eXchange profile applied...

CVE-2019-6669

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, undisclosed traffic flow may cause TMM to restart under some circumstances...

CVE-2019-6666

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, and 13.1.0-13.1.1.4, the TMM process may produce a core file when an upstream server or cache sends the BIG-IP an invalid age header value...

Code injection

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, undisclosed traffic flow may cause TMM to restart under some circumstances...

Design/Logic Flaw

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, and 13.1.0-13.1.1.4, the TMM process may produce a core file when an upstream server or cache sends the BIG-IP an invalid age header value...

Code injection

On versions 15.0.0-15.0.1 and 14.0.0-14.1.2, when the BIG-IP is configured in HTTP/2 Full Proxy mode, specifically crafted requests may cause a disruption of service provided by the Traffic Management Microkernel TMM...

CVE-2019-6666

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, and 13.1.0-13.1.1.4, the TMM process may produce a core file when an upstream server or cache sends the BIG-IP an invalid age header value...

CVE-2019-6666

CVE-2019-6666 affects F5 BIG-IP TMM on multiple versions: 15.0.0–15.0.1, 14.1.0–14.1.0.5, 14.0.0–14.0.0.4, and 13.1.0–13.1.1.4. The vulnerability occurs when an upstream server or cache sends an invalid age header, causing the TMM process to produce a core file. Impact is a temporary processing d...

CVE-2019-6667

CVE-2019-6667 affects F5 BIG-IP TMM when a FIX profile is used; under certain conditions, TMM can exhaust resources and cause a DoS as traffic is processed for a Virtual Server with FIX. Affected versions range from 11.5.1–15.0.1 across multiple BIG-IP lines; remediation per the advisory is to up...

CVE-2019-6669

CVE-2019-6669 affects F5 BIG-IP Traffic Management Microkernel (TMM) across multiple releases. A remote attacker could trigger a restart of TMM via undisclosed traffic flow, impacting availability on multi-blade chassis and multi-blade vCMP guests (not on single-blade, BIG-IP VE, or single-blade ...

CVE-2019-6669

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, undisclosed traffic flow may cause TMM to restart under some circumstances...

CVE-2019-6674

On F5 SSL Orchestrator 15.0.0-15.0.1 and 14.0.0-14.1.2, TMM may crash when processing SSLO data in a service-chaining configuration...

Design/Logic Flaw

On F5 SSL Orchestrator 15.0.0-15.0.1 and 14.0.0-14.1.2, TMM may crash when processing SSLO data in a service-chaining configuration...

CVE-2019-6674

The CVE affects F5 SSL Orchestrator’s Traffic Management Microkernel (TMM) and may crash when processing SSLO data in a service-chaining configuration. Affected versions are 15.0.0–15.0.1 and 14.0.0–14.1.2; remediation is to upgrade to fixed releases: 15.1.0 for 15.x and 14.1.2.1 for 14.x. Docume...

CVE-2019-6674

On F5 SSL Orchestrator 15.0.0-15.0.1 and 14.0.0-14.1.2, TMM may crash when processing SSLO data in a service-chaining configuration...

PT-2019-18248

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 13.1.0 through 13.1.1.4 F5 BIG-IP versions 14.0.0 through 14.0.0.4 F5 BIG-IP versions 14.1.0 through 14.1.0.5 F5 BIG-IP versions 15.0.0 through 15.0.1 Description The TMM process may produce a core file when an upstream serv...

CVE-2019-6666: Undefined Security Weakness

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, and 13.1.0-13.1.1.4, the TMM process may produce a core file when an upstream server or cache sends the BIG-IP an invalid age header value...