CVE-2019-6631: High severity riverbed steelapp traffic manager vulnerability
On BIG-IP 11.5.1-11.6.4, iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated HTTP profile, in specific circumstances, when the requests do not strictly conform to RFCs.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-6631?
CVE-2019-6631 is a vulnerability on BIG-IP 11.5.1-11.6.4 where iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated HTTP profile.
How does CVE-2019-6631 affect F5 BIG-IP products?
CVE-2019-6631 affects various F5 BIG-IP products, including Local Traffic Manager, Application Acceleration Manager, Advanced Firewall Manager, Analytics, Access Policy Manager, Application Security Manager, Domain Name System, Edge Gateway, Global Traffic Manager, Link Controller, Policy Enforcement Manager, Webaccelerator, and Websafe.
What is the severity level of CVE-2019-6631?
CVE-2019-6631 has a severity level of high, with a CVSS score of 7.5.
How can I fix CVE-2019-6631?
To fix CVE-2019-6631, upgrade your F5 BIG-IP software to a version between 11.5.2 and 11.6.4.
Where can I find more information about CVE-2019-6631?
You can find more information about CVE-2019-6631 on the SecurityFocus website and the F5 support article.