CVE-2019-6628

CVE-2019-6628 affects BIG-IP PEM when using the OpenVPN classifier. The TMM process may terminate and restart under certain conditions. Affected: BIG-IP PEM 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4. Fixes: 14.1.0.6 and 14.0.0.5. Mitigation (from advisory): disable the OpenVPN classifier or apply the r...

PT-2019-18210

Name of the Vulnerable Software and Affected Versions BIG-IP PEM versions 14.0.0 through 14.0.0.4 BIG-IP PEM versions 14.1.0 through 14.1.0.5 Description The issue occurs under certain conditions where the TMM process may terminate and restart while processing BIG-IP PEM traffic with the OpenVPN...

CVE-2019-6627: Concurrent Execution using Shared Resource with Improper Synchronization

On F5 SSL Orchestrator 14.1.0-14.1.0.5, on rare occasions, specific to a certain race condition, TMM may restart when SSL Forward Proxy enforces the bypass action for an SSL Orchestrator transparent virtual server with SNAT enabled...

CVE-2019-6629: Undefined Security Weakness

On BIG-IP 14.1.0-14.1.0.5, undisclosed SSL traffic to a virtual server configured with a Client SSL profile may cause TMM to fail and restart. The Client SSL profile must have session tickets enabled and use DHE cipher suites to be affected. This only impacts the data plane, there is no impact to...

PT-2019-18212

Name of the Vulnerable Software and Affected Versions F5 SSL Orchestrator versions 14.0.0 through 14.0.0.4 F5 SSL Orchestrator versions 14.1.0 through 14.1.0.5 Description The issue is related to undisclosed traffic flow that may cause the Traffic Management Microkernel TMM to restart under certa...

PT-2019-18209

Name of the Vulnerable Software and Affected Versions F5 SSL Orchestrator versions 14.1.0 through 14.1.0.5 Description The issue occurs under specific conditions involving a race condition, where the Traffic Management Microkernel TMM may restart when SSL Forward Proxy enforces a bypass action fo...

CVE-2019-6630: Undefined Security Weakness

On F5 SSL Orchestrator 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, undisclosed traffic flow may cause TMM to restart under certain circumstances...

CVE-2019-6628: Undefined Security Weakness

On BIG-IP PEM 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, under certain conditions, the TMM process may terminate and restart while processing BIG-IP PEM traffic with the OpenVPN classifier...

CVE-2019-6623

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, undisclosed traffic sent to BIG-IP iSession virtual server may cause the Traffic Management Microkernel TMM to restart, resulting in a Denial-of-Service DoS...

CVE-2019-6623

CVE-2019-6623 affects F5 BIG-IP TMM when an iSession virtual server receives undisclosed traffic, causing TMM to restart and generate DoS across multiple BIG-IP train versions (12.1.x, 13.0–13.1.1.x, 14.0–14.1.x). Affected ranges: 12.1.0–12.1.4, 13.0.0–13.1.1.4, 14.0.0–14.0.4, 14.1.0–14.1.0.5. Re...

CVE-2019-6623

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, undisclosed traffic sent to BIG-IP iSession virtual server may cause the Traffic Management Microkernel TMM to restart, resulting in a Denial-of-Service DoS...

F5 Networks BIG-IP : TMM vulnerability (K07127032)

An undisclosed traffic pattern sent to a BIG-IP UDP virtual server may lead to a denial-of-service DoS, if that virtual server is configured with a Protocol setting of UDP and has an associated UDP Protocol Profile with the Datagram LB option enabled. CVE-2019-6624 Impact A remote attacker may be...

F5 Networks BIG-IP : BIG-IP HTTP profile vulnerability (K19501795)

iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated HTTP profile, in specific circumstances, when the requests do not strictly conform to RFCs. CVE-2019-6631 Impact The BIG-IP system Traffic...

F5 Networks BIG-IP : TMM vulnerability (K95434410)

Undisclosed SSL traffic to a virtual server configured with a Client SSL profile may cause TMM to fail and restart. The Client SSL profile must have session tickets enabled and use DHE cipher suites to be affected. This only impacts the data plane, there is no impact to the control plane...

F5 Networks BIG-IP : TMM vulnerability (K72335002)

Undisclosed traffic sent to BIG-IP iSession virtual server may cause the Traffic Management Microkernel TMM to restart, resulting in a Denial-of-Service DoS. CVE-2019-6623 Impact A remote attacker may be able to perform a denial-of-service DoS attack on a BIG-IP system by causing the TMM process ...

CVE-2019-6623: Undefined Security Weakness

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, undisclosed traffic sent to BIG-IP iSession virtual server may cause the Traffic Management Microkernel TMM to restart, resulting in a Denial-of-Service DoS...

CVE-2019-6619

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, the Traffic Management Microkernel TMM may restart when a virtual server has an HTTP/2 profile with Application Layer Protocol Negotiation ALPN enabled and it processes traffic where the ALPN extension size is zero...

Code injection

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, the Traffic Management Microkernel TMM may restart when a virtual server has an HTTP/2 profile with Application Layer Protocol Negotiation ALPN enabled and it processes traffic where the ALPN extension size is zero...

CVE-2019-6619

The CVE-2019-6619 issue affects BIG-IP TMM where an HTTP/2 profile with ALPN enabled can trigger a TMM restart when processing traffic with a zero-length ALPN extension. Affected versions include BIG-IP 12.1.0–12.1.4, 13.0.0–13.1.1.4, and 14.0.0–14.1.0.1. The impact is a core dump and TMM restart...

CVE-2019-6611

When BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8 are processing certain rare data sequences occurring in PPTP VPN traffic, the BIG-IP system may execute incorrect logic. The TMM may restart and produce a core file as a result of this condition. The...