CVEvulnerability

CVE-2019-6603

7.5 HIGH Published 2019-03-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-03-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

In BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, and 13.0.0-13.0.1, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs.

Affected configurations

• f5 big-ip access policy manager (>= 11.5.1 <= 11.5.8) • f5 big-ip access policy manager (>= 11.6.1 <= 11.6.3) • f5 big-ip access policy manager (>= 12.1.0 <= 12.1.3) • f5 big-ip access policy manager (>= 13.0.0 <= 13.0.1) • f5 big-ip advanced firewall manager (>= 11.5.1 <= 11.5.8) • f5 big-ip advanced firewall manager (>= 11.6.1 <= 11.6.3) • f5 big-ip advanced firewall manager (>= 12.1.0 <= 12.1.3) • f5 big-ip advanced firewall manager (>= 13.0.0 <= 13.0.1) • f5 big-ip application acceleration manager (>= 11.5.1 <= 11.5.8) • f5 big-ip application acceleration manager (>= 11.6.1 <= 11.6.3) • f5 big-ip application acceleration manager (>= 12.1.0 <= 12.1.3) • f5 big-ip application acceleration manager (>= 13.0.0 <= 13.0.1) • f5 big-ip edge gateway (>= 11.5.1 <= 11.5.8) • f5 big-ip edge gateway (>= 11.6.1 <= 11.6.3) • f5 big-ip edge gateway (>= 12.1.0 <= 12.1.3) • f5 big-ip edge gateway (>= 13.0.0 <= 13.0.1) • f5 big-ip fraud protection service (>= 11.5.1 <= 11.5.8) • f5 big-ip fraud protection service (>= 11.6.1 <= 11.6.3) • f5 big-ip fraud protection service (>= 12.1.0 <= 12.1.3) • f5 big-ip fraud protection service (>= 13.0.0 <= 13.0.1) • f5 big-ip global traffic manager (>= 11.5.1 <= 11.5.8) • f5 big-ip global traffic manager (>= 11.6.1 <= 11.6.3) • f5 big-ip global traffic manager (>= 12.1.0 <= 12.1.3) • f5 big-ip global traffic manager (>= 13.0.0 <= 13.0.1) • f5 big-ip link controller (>= 11.5.1 <= 11.5.8) • f5 big-ip link controller (>= 11.6.1 <= 11.6.3) • f5 big-ip link controller (>= 12.1.0 <= 12.1.3) • f5 big-ip link controller (>= 13.0.0 <= 13.0.1) • f5 big-ip local traffic manager (>= 11.5.1 <= 11.5.8) • f5 big-ip local traffic manager (>= 11.6.1 <= 11.6.3) • f5 big-ip local traffic manager (>= 12.1.0 <= 12.1.3) • f5 big-ip local traffic manager (>= 13.0.0 <= 13.0.1) • f5 big-ip policy enforcement manager (>= 11.5.1 <= 11.5.8) • f5 big-ip policy enforcement manager (>= 11.6.1 <= 11.6.3) • f5 big-ip policy enforcement manager (>= 12.1.0 <= 12.1.3) • f5 big-ip policy enforcement manager (>= 13.0.0 <= 13.0.1) • f5 big-ip protocol security manager (>= 11.5.1 <= 11.5.8) • f5 big-ip protocol security manager (>= 11.6.1 <= 11.6.3) • f5 big-ip protocol security manager (>= 12.1.0 <= 12.1.3) • f5 big-ip protocol security manager (>= 13.0.0 <= 13.0.1) • f5 big-ip webaccelerator (>= 11.5.1 <= 11.5.8) • f5 big-ip webaccelerator (>= 11.6.1 <= 11.6.3) • f5 big-ip webaccelerator (>= 12.0.0 <= 12.1.3) • f5 big-ip webaccelerator (>= 13.0.0 <= 13.0.1) • f5 big-ip analytics (>= 11.5.1 <= 11.5.8) • f5 big-ip analytics (>= 11.6.1 <= 11.6.3) • f5 big-ip analytics (>= 12.1.0 <= 12.1.3) • f5 big-ip analytics (>= 13.0.0 <= 13.0.1) • f5 big-ip application security manager (>= 11.5.1 <= 11.5.8) • f5 big-ip application security manager (>= 11.6.1 <= 11.6.3) • f5 big-ip application security manager (>= 12.1.0 <= 12.1.3) • f5 big-ip application security manager (>= 13.0.0 <= 13.0.1)

References