CVE-2019-6673
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/11/2019
Last modified:
24/08/2020
Description
On versions 15.0.0-15.0.1 and 14.0.0-14.1.2, when the BIG-IP is configured in HTTP/2 Full Proxy mode, specifically crafted requests may cause a disruption of service provided by the Traffic Management Microkernel (TMM).
Impact
Base Score 3.x
7.50
Severity 3.x
HIGH
Base Score 2.0
4.30
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* | 14.0.0 (including) | 14.1.2 (including) |
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* | 15.0.0 (including) | 15.0.1 (including) |
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* | 14.0.0 (including) | 14.1.2 (including) |
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* | 15.0.0 (including) | 15.0.1 (including) |
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* | 14.0.0 (including) | 14.1.2 (including) |
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* | 15.0.0 (including) | 15.0.1 (including) |
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* | 14.0.0 (including) | 14.1.2 (including) |
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* | 15.0.0 (including) | 15.0.1 (including) |
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* | 14.0.0 (including) | 14.1.2 (including) |
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* | 15.0.0 (including) | 15.0.1 (including) |
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* | 14.0.0 (including) | 14.1.2 (including) |
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* | 15.0.0 (including) | 15.0.1 (including) |
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* | 14.0.0 (including) | 14.1.2 (including) |
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* | 15.0.0 (including) | 15.0.1 (including) |
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* | 14.0.0 (including) | 14.1.2 (including) |
To consult the complete list of CPE names with products and versions, see this page