In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when an LTM virtual server is configured to perform normalization, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Weakness
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Big-ip_access_policy_manager | F5 | 13.1.0 (including) | 13.1.5 (including) |
| Big-ip_access_policy_manager | F5 | 14.1.0 (including) | 14.1.5 (excluding) |
| Big-ip_access_policy_manager | F5 | 15.1.0 (including) | 15.1.6.1 (excluding) |
| Big-ip_access_policy_manager | F5 | 16.1.0 (including) | 16.1.3.1 (excluding) |
| Big-ip_advanced_firewall_manager | F5 | 13.1.0 (including) | 13.1.5 (including) |
| Big-ip_advanced_firewall_manager | F5 | 14.1.0 (including) | 14.1.5 (excluding) |
| Big-ip_advanced_firewall_manager | F5 | 15.1.0 (including) | 15.1.6.1 (excluding) |
| Big-ip_advanced_firewall_manager | F5 | 16.1.0 (including) | 16.1.3.1 (excluding) |
| Big-ip_analytics | F5 | 13.1.0 (including) | 13.1.5 (including) |
| Big-ip_analytics | F5 | 14.1.0 (including) | 14.1.5 (excluding) |
| Big-ip_analytics | F5 | 15.1.0 (including) | 15.1.6.1 (excluding) |
| Big-ip_analytics | F5 | 16.1.0 (including) | 16.1.3.1 (excluding) |
| Big-ip_application_acceleration_manager | F5 | 13.1.0 (including) | 13.1.5 (including) |
| Big-ip_application_acceleration_manager | F5 | 14.1.0 (including) | 14.1.5 (excluding) |
| Big-ip_application_acceleration_manager | F5 | 15.1.0 (including) | 15.1.6.1 (excluding) |
| Big-ip_application_acceleration_manager | F5 | 16.1.0 (including) | 16.1.3.1 (excluding) |
| Big-ip_application_security_manager | F5 | 13.1.0 (including) | 13.1.5 (including) |
| Big-ip_application_security_manager | F5 | 14.1.0 (including) | 14.1.5 (excluding) |
| Big-ip_application_security_manager | F5 | 15.1.0 (including) | 15.1.6.1 (excluding) |
| Big-ip_application_security_manager | F5 | 16.1.0 (including) | 16.1.3.1 (excluding) |
| Big-ip_domain_name_system | F5 | 13.1.0 (including) | 13.1.5 (including) |
| Big-ip_domain_name_system | F5 | 14.1.0 (including) | 14.1.5 (excluding) |
| Big-ip_domain_name_system | F5 | 15.1.0 (including) | 15.1.6.1 (excluding) |
| Big-ip_domain_name_system | F5 | 16.1.0 (including) | 16.1.3.1 (excluding) |
| Big-ip_fraud_protection_service | F5 | 13.1.0 (including) | 13.1.5 (including) |
| Big-ip_fraud_protection_service | F5 | 14.1.0 (including) | 14.1.5 (excluding) |
| Big-ip_fraud_protection_service | F5 | 15.1.0 (including) | 15.1.6.1 (excluding) |
| Big-ip_fraud_protection_service | F5 | 16.1.0 (including) | 16.1.3.1 (excluding) |
| Big-ip_global_traffic_manager | F5 | 13.1.0 (including) | 13.1.5 (including) |
| Big-ip_global_traffic_manager | F5 | 14.1.0 (including) | 14.1.5 (excluding) |
| Big-ip_global_traffic_manager | F5 | 15.1.0 (including) | 15.1.6.1 (excluding) |
| Big-ip_global_traffic_manager | F5 | 16.1.0 (including) | 16.1.3.1 (excluding) |
| Big-ip_link_controller | F5 | 13.1.0 (including) | 13.1.5 (including) |
| Big-ip_link_controller | F5 | 14.1.0 (including) | 14.1.5 (excluding) |
| Big-ip_link_controller | F5 | 15.1.0 (including) | 15.1.6.1 (excluding) |
| Big-ip_link_controller | F5 | 16.1.0 (including) | 16.1.3.1 (excluding) |
| Big-ip_local_traffic_manager | F5 | 13.1.0 (including) | 13.1.5 (including) |
| Big-ip_local_traffic_manager | F5 | 14.1.0 (including) | 14.1.5 (excluding) |
| Big-ip_local_traffic_manager | F5 | 15.1.0 (including) | 15.1.6.1 (excluding) |
| Big-ip_local_traffic_manager | F5 | 16.1.0 (including) | 16.1.3.1 (excluding) |
| Big-ip_policy_enforcement_manager | F5 | 13.1.0 (including) | 13.1.5 (including) |
| Big-ip_policy_enforcement_manager | F5 | 14.1.0 (including) | 14.1.5 (excluding) |
| Big-ip_policy_enforcement_manager | F5 | 15.1.0 (including) | 15.1.6.1 (excluding) |
| Big-ip_policy_enforcement_manager | F5 | 16.1.0 (including) | 16.1.3.1 (excluding) |