CVE Vulnerabilities

CVE-2019-6603

Published: Mar 28, 2019 | Modified: Aug 24, 2020
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

In BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, and 13.0.0-13.0.1, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs.

Affected Software

Name Vendor Start Version End Version
Big-ip_access_policy_manager F5 11.5.1 (including) 11.5.8 (including)
Big-ip_access_policy_manager F5 11.6.1 (including) 11.6.3 (including)
Big-ip_access_policy_manager F5 12.1.0 (including) 12.1.3 (including)
Big-ip_access_policy_manager F5 13.0.0 (including) 13.0.1 (including)

References