CVE-2019-6673 PUBLISHED CVSS 7.5 HIGH

On versions 15.0.0-15.0.1 and 14.0.0-14.1.2, when the BIG-IP is configured in HTTP/2 Full Proxy mode, specifically crafted requests may cause a disruption of service provided by the Traffic Management Microkernel (TMM).

EPSS 0.89% · 75.4th percentile

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.89%
75.4th percentile

Affected Products

VendorProductVersions
f5big-ip_access_policy_manager14.0.0, 15.0.0
f5big-ip_fraud_protection_service14.0.0, 15.0.0
f5big-ip_advanced_firewall_manager14.0.0, 15.0.0
f5big-ip_local_traffic_manager14.0.0, 15.0.0
F5BIG-IP15.0.0-15.0.1, 14.0.0-14.1.2
f5big-ip_application_acceleration_manager14.0.0, 15.0.0
f5big-ip_policy_enforcement_manager15.0.0, 14.0.0
f5big-ip_link_controller14.0.0, 15.0.0
f5big-ip_application_security_manager15.0.0, 14.0.0

Timeline

References

Open in Interactive Console →