CVE-2019-6594: Medium severity f5 access policy manager vulnerability
Published Feb 26, 2019
·Updated
On BIG-IP 11.5.1-11.6.3.2, 12.1.3.4-12.1.3.7, 13.0.0 HF1-13.1.1.1, and 14.0.0-14.0.0.2, Multi-Path TCP (MPTCP) does not protect against multiple zero length DATAFINs in the reassembly queue, which can lead to an infinite loop in some circumstances.
Affected Software
86 affected components
F5 BIG-IP Access Policy Manager>=11.5.3<=11.6.3.2
F5 BIG-IP Access Policy Manager>=12.1.3.4<=12.1.3.7
F5 BIG-IP Access Policy Manager>=13.0.1<=13.1.1.1
F5 BIG-IP Access Policy Manager>=14.0.0<=14.0.0.2
F5 BIG-IP Access Policy Manager=13.0.0-hf1
F5 BIG-IP Access Policy Manager=13.0.0-hf2
F5 BIG-IP Access Policy Manager=13.0.0-hf3
F5 Big-ip Local Traffic Manager>=11.5.1<=11.6.3.2
F5 Big-ip Local Traffic Manager>=12.1.3.4<=12.1.3.7
F5 Big-ip Local Traffic Manager>=13.0.1<=13.1.1.1
F5 Big-ip Local Traffic Manager>=14.0.0<=14.0.0.2
F5 Big-ip Local Traffic Manager=13.0.0-hf1
F5 Big-ip Local Traffic Manager=13.0.0-hf2
F5 Big-ip Local Traffic Manager=13.0.0-hf3
F5 BIG-IP Advanced Firewall Manager>=11.5.1<=11.6.3.2
F5 BIG-IP Advanced Firewall Manager>=12.1.3.4<=12.1.3.7
F5 BIG-IP Advanced Firewall Manager>=13.0.1<=13.1.1.1
F5 BIG-IP Advanced Firewall Manager>=14.0.0<=14.0.0.2
F5 BIG-IP Advanced Firewall Manager=13.0.0-hf1
F5 BIG-IP Advanced Firewall Manager=13.0.0-hf2
F5 BIG-IP Advanced Firewall Manager=13.0.0-hf3
F5 BIG-IP Analytics>=11.5.1<=11.6.3.2
F5 BIG-IP Analytics>=12.1.3.4<=12.1.3.7
F5 BIG-IP Analytics>=13.0.1<=13.1.1.1
F5 BIG-IP Analytics>=14.0.0<=14.0.0.2
F5 BIG-IP Analytics=13.0.0-hf1
F5 BIG-IP Analytics=13.0.0-hf2
F5 BIG-IP Analytics=13.0.0-hf3
F5 BIG-IP Access Policy Manager>=11.5.1<=11.6.3.2
F5 BIG-IP Access Policy Manager>=13.0.0.1<=13.1.1.1
F5 BIG-IP Application Security Manager>=11.5.1<=11.6.3.2
F5 BIG-IP Application Security Manager>=12.1.3.4<=12.1.3.7
F5 BIG-IP Application Security Manager>=13.0.1<=13.1.1.1
F5 BIG-IP Application Security Manager>=14.0.0<=14.0.0.2
F5 BIG-IP Application Security Manager=13.0.0-hf1
F5 BIG-IP Application Security Manager=13.0.0-hf2
F5 BIG-IP Application Security Manager=13.0.0-hf3
F5 Big-ip Domain Name System>=11.5.1<=11.6.3.2
F5 Big-ip Domain Name System>=12.1.3.4<=12.1.3.7
F5 Big-ip Domain Name System>=13.0.1<=13.1.1.1
F5 Big-ip Domain Name System>=14.0.0<=14.0.0.2
F5 Big-ip Domain Name System=13.0.0-hf1
F5 Big-ip Domain Name System=13.0.0-hf2
F5 Big-ip Domain Name System=13.0.0-hf3
F5 BIG-IP Edge Gateway>=11.5.1<=11.6.3.2
F5 BIG-IP Edge Gateway>=12.1.3.4<=12.1.3.7
F5 BIG-IP Edge Gateway>=13.0.1<=13.1.1.1
F5 BIG-IP Edge Gateway>=14.0.0<=14.0.0.2
F5 BIG-IP Edge Gateway=13.0.0-hf1
F5 BIG-IP Edge Gateway=13.0.0-hf2
F5 BIG-IP Edge Gateway=13.0.0-hf3
F5 Big-ip Fraud Protection Service>=11.5.1<=11.6.3.2
F5 Big-ip Fraud Protection Service>=12.1.3.4<=12.1.3.7
F5 Big-ip Fraud Protection Service>=13.0.1<=13.1.1.1
F5 Big-ip Fraud Protection Service>=14.0.0<=14.0.0.2
F5 Big-ip Fraud Protection Service=13.0.0-hf1
F5 Big-ip Fraud Protection Service=13.0.0-hf2
F5 Big-ip Fraud Protection Service=13.0.0-hf3
F5 Big-ip Global Traffic Manager>=11.5.1<=11.6.3.2
F5 Big-ip Global Traffic Manager>=12.1.3.4<=12.1.3.7
F5 Big-ip Global Traffic Manager>=13.0.1<=13.1.1.1
F5 Big-ip Global Traffic Manager>=14.0.0<=14.0.0.2
F5 Big-ip Global Traffic Manager=13.0.0-hf1
F5 Big-ip Global Traffic Manager=13.0.0-hf2
F5 Big-ip Global Traffic Manager=13.0.0-hf3
F5 Big-ip Link Controller>=11.5.1<=11.6.3.2
F5 Big-ip Link Controller>=12.1.3.4<=12.1.3.7
F5 Big-ip Link Controller>=13.0.1<=13.1.1.1
F5 Big-ip Link Controller>=14.0.0<=14.0.0.2
F5 Big-ip Link Controller=13.0.0-hf1
F5 Big-ip Link Controller=13.0.0-hf2
F5 Big-ip Link Controller=13.0.0-hf3
F5 Big-ip Policy Enforcement Manager>=11.5.1<=11.6.3.2
F5 Big-ip Policy Enforcement Manager>=12.1.3.4<=12.1.3.7
F5 Big-ip Policy Enforcement Manager>=13.0.1<=13.1.1.1
F5 Big-ip Policy Enforcement Manager>=14.0.0<=14.0.0.2
F5 Big-ip Policy Enforcement Manager=13.0.0-hf1
F5 Big-ip Policy Enforcement Manager=13.0.0-hf2
F5 Big-ip Policy Enforcement Manager=13.0.0-hf3
F5 Big-ip Webaccelerator>=11.5.1<=11.6.3.2
F5 Big-ip Webaccelerator>=12.1.3.4<=12.1.3.7
F5 Big-ip Webaccelerator>=13.0.1<=13.1.1.1
F5 Big-ip Webaccelerator>=14.0.0<=14.0.0.2
F5 Big-ip Webaccelerator=13.0.0-hf1
F5 Big-ip Webaccelerator=13.0.0-hf2
F5 Big-ip Webaccelerator=13.0.0-hf3
Event History
Feb 26, 2019
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionWeakness
Data Sourced
via NVD·03:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-6594?
The CVE-2019-6594 vulnerability has been classified as high severity due to the potential for causing an infinite loop in affected systems.
2
Which versions are affected by CVE-2019-6594?
CVE-2019-6594 affects F5 BIG-IP versions 11.5.1-11.6.3.2, 12.1.3.4-12.1.3.7, 13.0.0 HF1-13.1.1.1, and 14.0.0-14.0.0.2.
3
How do I fix CVE-2019-6594?
To mitigate CVE-2019-6594, it is recommended to upgrade to a non-vulnerable version of the affected F5 BIG-IP products.
4
What impact does CVE-2019-6594 have on system performance?
CVE-2019-6594 can lead to performance degradation due to the potential infinite loop affecting the processing of packets.
5
Is there a workaround for CVE-2019-6594?
Currently, there are no known workarounds for CVE-2019-6594 other than applying the recommended software updates.