CVE-2019-6611
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
When BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8 are processing certain rare data sequences occurring in PPTP VPN traffic, the BIG-IP system may execute incorrect logic. The TMM may restart and produce a core file as a result of this condition. The BIG-IP system provisioned with the CGNAT module and configured with a virtual server using a PPTP profile is exposed to this vulnerability.
Affected (65)
Products: F5: Big Ip Access Policy Manager, Big Ip Advanced Firewall Manager, Big Ip Application Acceleration Manager, Big Ip Link Controller, Big Ip Policy Enforcement Manager, Big Ip Webaccelerator, Big Ip Application Security Manager, Big Ip Local Traffic Manager, Big Ip Fraud Protection Service, Big Ip Global Traffic Manager, Big Ip Analytics, Big Ip Edge Gateway, Big Ip Domain Name System
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.2 to 11.5.9 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.2 to 11.5.9 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.2 to 11.5.9 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.2 to 11.5.9 |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.2 to 11.5.9 |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.2 to 11.5.9 |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.2 to 11.5.9 |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.2 to 11.5.9 |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.2 to 11.5.9 |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.2 to 11.5.9 |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.2 to 11.5.9 |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.2 to 11.5.9 |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| From 11.5.2 to 11.5.9 |
References (4)
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.