PT-2020-18756

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions with specific engineering hotfixes, including Hotfix-BIGIP-14.1.2.1.0.83.4-ENG, Hotfix-BIGIP-12.1.4.1.0.97.6-ENG, and Hotfix-BIGIP-11.5.4.2.74.291-HF2 Description The issue is caused by undisclosed traffic patterns received,...

CVE-2020-5852: Undefined Security Weakness

Undisclosed traffic patterns received may cause a disruption of service to the Traffic Management Microkernel TMM. This vulnerability affects TMM through a virtual server configured with a FastL4 profile. Traffic processing is disrupted while TMM restarts. This issue only impacts specific...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K04897373)

When the tm.minipfragsize BigDB variable is modified from the default value to a value less than 60 and the packet filter feature is enabled, specifically crafted fragmented TCP packets may cause the Traffic Management Microkernel TMM to fail and restart.CVE-2019-6678 Impact TMM may restart and...

F5 Networks BIG-IP : BIG-IP HTTP/2 vulnerability (K81557381)

When the BIG-IP system is configured in HTTP/2 full proxy mode, specifically crafted requests may cause a disruption of service provided by the Traffic Management Microkernel TMM. CVE-2019-6673 Impact An attacker may be able to use a specifically crafted request to cause a disruption of service...

CVE-2019-6686

On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, the Traffic Management Microkernel TMM might stop responding after the total number of diameter connections and pending messages on a single virtual server has reached 32K...

CVE-2019-6686

On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, the Traffic Management Microkernel TMM might stop responding after the total number of diameter connections and pending messages on a single virtual server has reached 32K...

F5 BIG-IP Input Validation Error Vulnerability (CNVD-2020-01192)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A security vulnerability exists in F5 BIG-IP. An attacker can exploit the vulnerability to cause the TMM to reboot, rendering ...

PT-2019-18268

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 13.1.0 through 13.1.3.1 F5 BIG-IP versions 14.0.0 through 14.0.1 F5 BIG-IP versions 14.1.0 through 14.1.2 F5 BIG-IP versions 15.0.0 through 15.0.1.1 Description The Traffic Management Microkernel TMM may stop responding when...

CVE-2019-6686: Undefined Security Weakness

On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, the Traffic Management Microkernel TMM might stop responding after the total number of diameter connections and pending messages on a single virtual server has reached 32K...

CVE-2019-6673

On versions 15.0.0-15.0.1 and 14.0.0-14.1.2, when the BIG-IP is configured in HTTP/2 Full Proxy mode, specifically crafted requests may cause a disruption of service provided by the Traffic Management Microkernel TMM...

CVE-2019-6673: Undefined Security Weakness

On versions 15.0.0-15.0.1 and 14.0.0-14.1.2, when the BIG-IP is configured in HTTP/2 Full Proxy mode, specifically crafted requests may cause a disruption of service provided by the Traffic Management Microkernel TMM...

PT-2019-18256

Name of the Vulnerable Software and Affected Versions F5 SSL Orchestrator versions 14.0.0 through 14.1.2 F5 SSL Orchestrator versions 15.0.0 through 15.0.1 Description The issue occurs when the Traffic Management Microkernel TMM processes SSLO data in a service-chaining configuration, potentially...

PT-2019-18251

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 15.0.0 through 15.0.1 F5 BIG-IP versions 14.1.0 through 14.1.2 F5 BIG-IP versions 14.0.0 through 14.0.1 F5 BIG-IP versions 13.1.0 through 13.1.3.1 F5 BIG-IP versions 12.1.0 through 12.1.5 F5 BIG-IP versions 11.5.1 through...

PT-2019-18255

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 14.0.0 through 14.1.2 F5 BIG-IP versions 15.0.0 through 15.0.1 Description The issue occurs when the BIG-IP is configured in HTTP/2 Full Proxy mode, and specifically crafted requests may cause a disruption of service provide...

PT-2019-18209

Name of the Vulnerable Software and Affected Versions F5 SSL Orchestrator versions 14.1.0 through 14.1.0.5 Description The issue occurs under specific conditions involving a race condition, where the Traffic Management Microkernel TMM may restart when SSL Forward Proxy enforces a bypass action fo...

PT-2019-18212

Name of the Vulnerable Software and Affected Versions F5 SSL Orchestrator versions 14.0.0 through 14.0.0.4 F5 SSL Orchestrator versions 14.1.0 through 14.1.0.5 Description The issue is related to undisclosed traffic flow that may cause the Traffic Management Microkernel TMM to restart under certa...

CVE-2019-6623

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, undisclosed traffic sent to BIG-IP iSession virtual server may cause the Traffic Management Microkernel TMM to restart, resulting in a Denial-of-Service DoS...

CVE-2019-6623: Undefined Security Weakness

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, undisclosed traffic sent to BIG-IP iSession virtual server may cause the Traffic Management Microkernel TMM to restart, resulting in a Denial-of-Service DoS...

CVE-2019-6619

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, the Traffic Management Microkernel TMM may restart when a virtual server has an HTTP/2 profile with Application Layer Protocol Negotiation ALPN enabled and it processes traffic where the ALPN extension size is zero...

CVE-2019-6619

On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, the Traffic Management Microkernel TMM may restart when a virtual server has an HTTP/2 profile with Application Layer Protocol Negotiation ALPN enabled and it processes traffic where the ALPN extension size is zero...