CVE-2019-6624: High severity f5 access policy manager vulnerability
Published Jul 2, 2019
·Updated
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, an undisclosed traffic pattern sent to a BIG-IP UDP virtual server may lead to a denial-of-service (DoS).
Affected Software
52 affected components
F5 BIG-IP Access Policy Manager>=12.1.0<=12.1.4
F5 BIG-IP Access Policy Manager>=13.0.0<=13.1.1.4
F5 BIG-IP Access Policy Manager>=14.0.0<=14.0.0.4
F5 BIG-IP Access Policy Manager>=14.1.0<=14.1.0.5
F5 BIG-IP Advanced Firewall Manager>=12.1.0<=12.1.4
F5 BIG-IP Advanced Firewall Manager>=13.0.0<=13.1.1.4
F5 BIG-IP Advanced Firewall Manager>=14.0.0<=14.0.0.4
F5 BIG-IP Advanced Firewall Manager>=14.1.0<=14.1.0.5
F5 Big-ip Application Acceleration Manager>=12.1.0<=12.1.4
F5 Big-ip Application Acceleration Manager>=13.0.0<=13.1.1.4
F5 Big-ip Application Acceleration Manager>=14.0.0<=14.0.0.4
F5 Big-ip Application Acceleration Manager>=14.1.0<=14.1.0.5
F5 Big-ip Link Controller>=12.1.0<=12.1.4
F5 Big-ip Link Controller>=13.0.0<=13.1.1.4
F5 Big-ip Link Controller>=14.0.0<=14.0.0.4
F5 Big-ip Link Controller>=14.1.0<=14.1.0.5
F5 Big-ip Policy Enforcement Manager>=12.1.0<=12.1.4
F5 Big-ip Policy Enforcement Manager>=13.0.0<=13.1.1.4
F5 Big-ip Policy Enforcement Manager>=14.0.0<=14.0.0.4
F5 Big-ip Policy Enforcement Manager>=14.1.0<=14.1.0.5
F5 Big-ip Webaccelerator>=12.1.0<=12.1.4
F5 Big-ip Webaccelerator>=13.0.0<=13.1.1.4
F5 Big-ip Webaccelerator>=14.0.0<=14.0.0.4
F5 Big-ip Webaccelerator>=14.1.0<=14.1.0.5
F5 BIG-IP Application Security Manager>=12.1.0<=12.1.4
F5 BIG-IP Application Security Manager>=13.0.0<=13.1.1.4
F5 BIG-IP Application Security Manager>=14.0.0<=14.0.0.4
F5 BIG-IP Application Security Manager>=14.1.0<=14.1.0.5
F5 Big-ip Local Traffic Manager>=12.1.0<=12.1.4
F5 Big-ip Local Traffic Manager>=13.0.0<=13.1.1.4
F5 Big-ip Local Traffic Manager>=14.0.0<=14.0.0.4
F5 Big-ip Local Traffic Manager>=14.1.0<=14.1.0.5
F5 Big-ip Fraud Protection Service>=12.1.0<=12.1.4
F5 Big-ip Fraud Protection Service>=13.0.0<=13.1.1.4
F5 Big-ip Fraud Protection Service>=14.0.0<=14.0.0.4
F5 Big-ip Fraud Protection Service>=14.1.0<=14.1.0.5
F5 Big-ip Global Traffic Manager>=12.1.0<=12.1.4
F5 Big-ip Global Traffic Manager>=13.0.0<=13.1.1.4
F5 Big-ip Global Traffic Manager>=14.0.0<=14.0.0.4
F5 Big-ip Global Traffic Manager>=14.1.0<=14.1.0.5
F5 BIG-IP Analytics>=12.1.0<=12.1.4
F5 BIG-IP Analytics>=13.0.0<=13.1.1.4
F5 BIG-IP Analytics>=14.0.0<=14.0.0.4
F5 BIG-IP Analytics>=14.1.0<=14.1.0.5
F5 BIG-IP Edge Gateway>=12.1.0<=12.1.4
F5 BIG-IP Edge Gateway>=13.0.0<=13.1.1.4
F5 BIG-IP Edge Gateway>=14.0.0<=14.0.0.4
F5 BIG-IP Edge Gateway>=14.1.0<=14.1.0.5
F5 Big-ip Domain Name System>=12.1.0<=12.1.4
F5 Big-ip Domain Name System>=13.0.0<=13.1.1.4
F5 Big-ip Domain Name System>=14.0.0<14.0.0.4
F5 Big-ip Domain Name System>=14.1.0<=14.1.0.5
Event History
Jul 2, 2019
CVE Published
via MITRE·08:55 PM
Data Sourced
via MITRE·08:55 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-6624?
CVE-2019-6624 is classified as a denial-of-service vulnerability that could impact system availability.
2
How do I fix CVE-2019-6624?
To mitigate CVE-2019-6624, update your F5 BIG-IP software to the latest fixed version.
3
Which versions of F5 BIG-IP are affected by CVE-2019-6624?
CVE-2019-6624 affects F5 BIG-IP versions 12.1.0 through 12.1.4, 13.0.0 through 13.1.1.4, and 14.1.0 through 14.1.0.5.
4
What impact does CVE-2019-6624 have on my system?
Exploiting CVE-2019-6624 may lead to a denial-of-service condition, disrupting service availability.
5
Is CVE-2019-6624 a remote vulnerability?
Yes, CVE-2019-6624 can be exploited by sending a specific traffic pattern to the vulnerable BIG-IP UDP virtual server remotely.