Design/Logic Flaw

On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, under certain conditions when using custom TCP congestion control settings in a TCP profile, TMM stops processing traffic when processed by an iRule...

Design/Logic Flaw

On versions 15.0.0-15.0.1, 14.0.0-14.1.2.2, and 13.1.0-13.1.3.1, TMM may restart on BIG-IP Virtual Edition VE when using virtio direct descriptors and packets 2 KB or larger...

CVE-2019-6686

CVE-2019-6686 affects BIG-IP Traffic Management Microkernel (TMM). Affected: BIG-IP versions 15.0.0–15.0.1.1, 14.1.0–14.1.2, 14.0.0–14.0.1, 13.1.0–13.1.3.1. Root cause: TMM may stop responding when total diameter connections and pending messages on a single virtual server reach 32K, causing a cor...

CVE-2019-6686

On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, the Traffic Management Microkernel TMM might stop responding after the total number of diameter connections and pending messages on a single virtual server has reached 32K...

CVE-2019-6678

On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, the TMM process may restart when the packet filter feature is enabled...

CVE-2019-6678

CVE-2019-6678 affects F5 BIG-IP TMM when the packet filter feature is enabled. The vulnerability arises when tm.minipfragsize is reduced below 60, causing specifically crafted fragmented TCP packets to cause TMM to fail and restart, potentially impacting traffic processing. Affected BIG-IP versio...

CVE-2019-6677

The CVE-2019-6677 issue affects F5 BIG-IP TMM when using custom TCP congestion control in a TCP profile, where traffic processing can stop for iRule-processed flows. Affected releases include BIG-IP 15.0.0–15.0.1, 14.1.0–14.1.2, 14.0.0–14.0.1, 13.1.0–13.1.3.1, and 12.1.0–12.1.5. The root cause is...

CVE-2019-6676

CVE-2019-6676 affects BIG-IP VE TMM: when using virtio direct descriptors with 2 KB or larger packets, TMM may restart and create a core file. Affected versions are BIG-IP VE: 15.0.0–15.0.1, 14.0.0–14.1.2, and 13.1.0–13.1.3.1. The advisory lists fixes in: 15.1.0, 14.1.2.3, and 13.1.3.2. Mitigatio...

CVE-2019-6676

On versions 15.0.0-15.0.1, 14.0.0-14.1.2.2, and 13.1.0-13.1.3.1, TMM may restart on BIG-IP Virtual Edition VE when using virtio direct descriptors and packets 2 KB or larger...

F5 BIG-IP Memory Disclosure Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A memory leakage vulnerability exists in F5 BIG-IP, which can be exploited by an attacker to cause a memory leakage, leading t...

CVE-2019-6669

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, undisclosed traffic flow may cause TMM to restart under some circumstances...

CVE-2019-6667

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.1.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.5.1-11.6.5, under certain conditions, TMM may consume excessive resources when processing traffic for a Virtual Server with the FIX Financial Information eXchange profile applied...

CVE-2019-6673

On versions 15.0.0-15.0.1 and 14.0.0-14.1.2, when the BIG-IP is configured in HTTP/2 Full Proxy mode, specifically crafted requests may cause a disruption of service provided by the Traffic Management Microkernel TMM...

CVE-2019-6669

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, undisclosed traffic flow may cause TMM to restart under some circumstances...

CVE-2019-6666

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, and 13.1.0-13.1.1.4, the TMM process may produce a core file when an upstream server or cache sends the BIG-IP an invalid age header value...

Code injection

On versions 15.0.0-15.0.1 and 14.0.0-14.1.2, when the BIG-IP is configured in HTTP/2 Full Proxy mode, specifically crafted requests may cause a disruption of service provided by the Traffic Management Microkernel TMM...

Design/Logic Flaw

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, and 13.1.0-13.1.1.4, the TMM process may produce a core file when an upstream server or cache sends the BIG-IP an invalid age header value...

Code injection

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, undisclosed traffic flow may cause TMM to restart under some circumstances...

CVE-2019-6666

On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, and 13.1.0-13.1.1.4, the TMM process may produce a core file when an upstream server or cache sends the BIG-IP an invalid age header value...

CVE-2019-6666

CVE-2019-6666 affects F5 BIG-IP TMM on multiple versions: 15.0.0–15.0.1, 14.1.0–14.1.0.5, 14.0.0–14.0.0.4, and 13.1.0–13.1.1.4. The vulnerability occurs when an upstream server or cache sends an invalid age header, causing the TMM process to produce a core file. Impact is a temporary processing d...