CVE-2019-6673 — Vulnetix

CVE-2019-6673 PUBLISHED CVSS 7.5 HIGH

On versions 15.0.0-15.0.1 and 14.0.0-14.1.2, when the BIG-IP is configured in HTTP/2 Full Proxy mode, specifically crafted requests may cause a disruption of service provided by the Traffic Management Microkernel (TMM).

EPSS 0.89% · 76.0th percentile

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

0.89%

76.0th percentile

Affected Products

Vendor	Product	Versions
f5	big-ip_access_policy_manager	14.0.0, 15.0.0
f5	big-ip_fraud_protection_service	14.0.0, 15.0.0
f5	big-ip_advanced_firewall_manager	15.0.0, 14.0.0
f5	big-ip_local_traffic_manager	15.0.0, 14.0.0
F5	BIG-IP	14.0.0-14.1.2, 15.0.0-15.0.1
f5	big-ip_application_acceleration_manager	15.0.0, 14.0.0
f5	big-ip_policy_enforcement_manager	14.0.0, 15.0.0
f5	big-ip_link_controller	15.0.0, 14.0.0
f5	big-ip_application_security_manager	14.0.0, 15.0.0

Exploit Intelligence

https://support.f5.com/csp/article/K81557381 (circl)

Timeline

Nov 26, 2019 CVE Published
Nov 27, 2019 CVE Updated
Apr 14, 2021 EPSS Score
Jun 23, 2021 EPSS Score
Aug 24, 2021 EPSS Score
Dec 27, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Feb 28, 2022 EPSS Score
May 1, 2022 EPSS Score
Jul 3, 2022 EPSS Score
Sep 4, 2022 EPSS Score

References

https://support.f5.com/csp/article/K05765031 advisory
https://support.f5.com/csp/article/K39225055 advisory
https://support.f5.com/csp/article/K63025104 advisory
https://support.f5.com/csp/article/K49827114 advisory
https://support.f5.com/csp/article/K81557381 advisory
https://support.f5.com/csp/article/K21135478 advisory
https://support.f5.com/csp/article/K11447758 advisory
https://support.f5.com/csp/article/K23860356 advisory
https://support.f5.com/csp/article/K82781208 advisory
https://support.f5.com/csp/article/K55655944 advisory
https://support.f5.com/csp/article/K14703097 advisory
https://support.f5.com/csp/article/K92411323 advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-6673 advisory

Open in Interactive Console →