CVEvulnerability

CVE-2019-6629

7.5 HIGH Published 2019-07-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-07-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P

Description

On BIG-IP 14.1.0-14.1.0.5, undisclosed SSL traffic to a virtual server configured with a Client SSL profile may cause TMM to fail and restart. The Client SSL profile must have session tickets enabled and use DHE cipher suites to be affected. This only impacts the data plane, there is no impact to the control plane.

Affected configurations

• f5 big-ip local traffic manager (>= 14.1.0.1 <= 14.1.0.5) • f5 big-ip application acceleration manager (>= 14.1.0.1 <= 14.1.0.5) • f5 big-ip advanced firewall manager (>= 14.1.0.1 <= 14.1.0.5) • f5 big-ip analytics (>= 14.1.0.1 <= 14.1.0.5) • f5 big-ip access policy manager (>= 14.1.0.1 <= 14.1.0.5) • f5 big-ip application security manager (>= 14.1.0.1 <= 14.1.0.5) • f5 big-ip domain name system (>= 14.1.0.1 <= 14.1.0.5) • f5 big-ip edge gateway (>= 14.1.0.1 <= 14.1.0.5) • f5 big-ip global traffic manager (>= 14.1.0.1 <= 14.1.0.5) • f5 big-ip link controller (>= 14.1.0.1 <= 14.1.0.5) • f5 big-ip policy enforcement manager (>= 14.1.0.1 <= 14.1.0.5) • f5 big-ip webaccelerator (>= 14.1.0.1 <= 14.1.0.5) • f5 big-ip websafe (>= 14.1.0.1 <= 14.1.0.5)

References