First published: Tue Feb 26 2019(Updated: )
On BIG-IP 14.1.0-14.1.0.1, TMM may restart and produce a core file when validating SSL certificates in client SSL or server SSL profiles.
Credit: f5sirt@f5.com f5sirt@f5.com
Affected Software | Affected Version | How to fix |
---|---|---|
F5 BIG-IP Access Policy Manager | >=14.1.0<=14.1.0.1 | |
F5 BIG-IP Local Traffic Manager | >=14.1.0<=14.1.0.1 | |
F5 BIG-IP Advanced Firewall Manager | >=14.1.0<=14.1.0.1 | |
F5 BIG-IP Analytics | >=14.1.0<=14.1.0.1 | |
F5 BIG-IP Application Security Manager | >=14.1.0<=14.1.0.1 | |
f5 big-ip domain name system | >=14.1.0<=14.1.0.1 | |
F5 BIG-IP Edge Gateway | >=14.1.0<=14.1.0.1 | |
f5 big-ip fraud protection service | >=14.1.0<=14.1.0.1 | |
F5 BIG-IP Global Traffic Manager | >=14.1.0<=14.1.0.1 | |
f5 big-ip link controller | >=14.1.0<=14.1.0.1 | |
F5 BIG-IP Policy Enforcement Manager | >=14.1.0<=14.1.0.1 | |
F5 BIG-IP WebAccelerator | >=14.1.0<=14.1.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-6592 is considered a high severity vulnerability due to its potential impact on system stability.
To fix CVE-2019-6592, you should upgrade to a patched version of F5 BIG-IP software that eliminates the vulnerability.
CVE-2019-6592 affects F5 BIG-IP versions from 14.1.0 to 14.1.0.1.
CVE-2019-6592 can cause the Traffic Management Microkernel (TMM) to restart, potentially interrupting service.
Yes, CVE-2019-6592 is applicable across multiple F5 BIG-IP modules, including Access Policy Manager and Local Traffic Manager.