On BIG-IP 11.5.1-11.6.3.2, 12.1.3.4-12.1.3.7, 13.0.0 HF1-13.1.1.1, and 14.0.0-14.0.0.2, Multi-Path TCP (MPTCP) does not protect against multiple zero length DATA_FINs in the reassembly queue, which can lead to an infinite loop in some circumstances.
Weakness
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Big-ip_access_policy_manager | F5 | 11.5.3 (including) | 11.6.3.2 (including) |
| Big-ip_access_policy_manager | F5 | 12.1.3.4 (including) | 12.1.3.7 (including) |
| Big-ip_access_policy_manager | F5 | 13.0.1 (including) | 13.1.1.1 (including) |
| Big-ip_access_policy_manager | F5 | 14.0.0 (including) | 14.0.0.2 (including) |
| Big-ip_access_policy_manager | F5 | 13.0.0-hf1 (including) | 13.0.0-hf1 (including) |
| Big-ip_access_policy_manager | F5 | 13.0.0-hf2 (including) | 13.0.0-hf2 (including) |
| Big-ip_access_policy_manager | F5 | 13.0.0-hf3 (including) | 13.0.0-hf3 (including) |