CVE-2014-6031

CWE-119 — Buffer Overflow3 documents3 sources

Severity

4.9MEDIUM

EPSS

0.5%

top 35.61%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

F5 Big-ip Access Policy Manager F5 Big-ip Advanced Firewall Manager F5 Big-ip Analytics +11 more

Timeline

PublishedJun 8

Latest updateMay 14

Description

Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x before 11.4.1 HF9, 11.5.x before 11.5.2 HF1, and 11.6.0 before HF4, and Enterprise Manager 2.1.0 through 2.3.0 and 3.x before 3.1.1 HF5 allows remote authenticated administrators to cause a denial of service via unspecified vectors.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 1.2 | Impact: 3.6

Affected Packages14 packages

▶NVDf5/big-ip_enterprise_manager6 versions+5

▶NVDf5/big-ip_access_policy_manager17 versions+16

▶NVDf5/big-ip_local_traffic_manager19 versions+18

▶NVDf5/big-ip_global_traffic_manager18 versions+17

▶NVDf5/big-ip_wan_optimization_manager12 versions+11

🔴Vulnerability Details

GHSA

GHSA-8qm4-8v2p-wx57: Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10↗2022-05-14

▶

CVEList

CVE-2014-6031: Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10↗2017-06-08

▶