CVE-2019-6603
published 2019-03-28CVE-2019-6603: In BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, and 13.0.0-13.0.1, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause…
PriorityP340high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
1.78%
78.1th percentile
In BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, and 13.0.0-13.0.1, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs.
Affected
65 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| f5 | big-ip_aam | — | — |
| f5 | big-ip_access_policy_manager | 11.5.1 – 11.5.8 | — |
| f5 | big-ip_access_policy_manager | 11.6.1 – 11.6.3 | — |
| f5 | big-ip_access_policy_manager | 12.1.0 – 12.1.3 | — |
| f5 | big-ip_access_policy_manager | 13.0.0 – 13.0.1 | — |
| f5 | big-ip_advanced_firewall_manager | 11.5.1 – 11.5.8 | — |
| f5 | big-ip_advanced_firewall_manager | 11.6.1 – 11.6.3 | — |
| f5 | big-ip_advanced_firewall_manager | 12.1.0 – 12.1.3 | — |
| f5 | big-ip_advanced_firewall_manager | 13.0.0 – 13.0.1 | — |
| f5 | big-ip_afm | — | — |
| f5 | big-ip_analytics | — | — |
| f5 | big-ip_analytics | 11.5.1 – 11.5.8 | — |
| f5 | big-ip_analytics | 11.6.1 – 11.6.3 | — |
| f5 | big-ip_analytics | 12.1.0 – 12.1.3 | — |
| f5 | big-ip_analytics | 13.0.0 – 13.0.1 | — |
| f5 | big-ip_apm | — | — |
| f5 | big-ip_application_acceleration_manager | 11.5.1 – 11.5.8 | — |
| f5 | big-ip_application_acceleration_manager | 11.6.1 – 11.6.3 | — |
| f5 | big-ip_application_acceleration_manager | 12.1.0 – 12.1.3 | — |
| f5 | big-ip_application_acceleration_manager | 13.0.0 – 13.0.1 | — |
| f5 | big-ip_application_security_manager | 11.5.1 – 11.5.8 | — |
| f5 | big-ip_application_security_manager | 11.6.1 – 11.6.3 | — |
| f5 | big-ip_application_security_manager | 12.1.0 – 12.1.3 | — |
| f5 | big-ip_application_security_manager | 13.0.0 – 13.0.1 | — |
| f5 | big-ip_asm | — | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
F5
CVE-2019-6603: In BIG-IP 11
vendor_f5·2019-03-28·CVSS 7.5
CVE-2019-6603 [HIGH] CVE-2019-6603: In BIG-IP 11
CVE-2019-6603: In BIG-IP 11
In BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, and 13.0.0-13.0.1, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs.
Affected Products: BIG-IP AAM, BIG-IP AFM, BIG-IP APM, BIG-IP ASM, BIG-IP Analytics, BIG-IP Edge Gateway, BIG-IP FPS, BIG-IP GTM, BIG-IP LTM, BIG-IP Link Controller, BIG-IP PEM, BIG-IP WebAccelerator, Big-Ip Protocol Security Manager
Affected Versions: 11.5.1 - 11.5.8; 11.6.1 - 11.6.3; 12.0.0 - 12.1.3; 12.1.0 - 12.1.3; 13.0.0 - 13.0.1
F5 Advisory Articles: K14632915
F5 References: https://support.f5.com/csp/article/K14632915
GHSA
GHSA-5fc7-fcqx-62c8: In BIG-IP 11
ghsa_unreviewed·2022-05-13
CVE-2019-6603 [HIGH] GHSA-5fc7-fcqx-62c8: In BIG-IP 11
In BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, and 13.0.0-13.0.1, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-03-28
Published