CVE-2019-6681: High severity riverbed steelapp traffic manager vulnerability

Q: What is the severity of CVE-2019-6681?

CVE-2019-6681 has a severity rating of high due to the potential impact of a memory leak in the multicast forwarding cache.

Q: How do I fix CVE-2019-6681?

To fix CVE-2019-6681, upgrade to one of the patched versions of BIG-IP specified in the vendor's advisory.

Q: Which versions of BIG-IP are affected by CVE-2019-6681?

CVE-2019-6681 affects F5 BIG-IP Local Traffic Manager versions 12.1.0-12.1.5, 13.1.0-13.1.3.1, 14.0.0-14.1.2, and 15.0.0-15.0.1.1.

Q: What is the impact of CVE-2019-6681?

The impact of CVE-2019-6681 includes a potential service disruption due to memory exhaustion if the memory leak is exploited.

Q: Can CVE-2019-6681 be exploited remotely?

Yes, CVE-2019-6681 can potentially be exploited remotely, making it critical to apply fixes promptly.

Published Dec 23, 2019

Updated

On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, a memory leak in Multicast Forwarding Cache (MFC) handling in tmrouted.

Affected Software

5 affected components

F5 Big-ip Local Traffic Manager>=12.1.0<=12.1.5

F5 Big-ip Local Traffic Manager>=13.1.0<13.1.3.2

F5 Big-ip Local Traffic Manager>=14.0.0<14.0.1.1

F5 Big-ip Local Traffic Manager>=14.1.0<14.1.2.1

F5 Big-ip Local Traffic Manager>=15.0.0<15.1.0

Event History

Dec 23, 2019

CVE Published

via MITRE·05:10 PM

Data Sourced

via MITRE·05:10 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-6681?

CVE-2019-6681 has a severity rating of high due to the potential impact of a memory leak in the multicast forwarding cache.

How do I fix CVE-2019-6681?

To fix CVE-2019-6681, upgrade to one of the patched versions of BIG-IP specified in the vendor's advisory.

Which versions of BIG-IP are affected by CVE-2019-6681?