cbcvebase.
CVE-2019-6619
published 2019-05-03

CVE-2019-6619: On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, the Traffic Management Microkernel (TMM) may restart when a virtual server has an HTTP/2 profile…

high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, the Traffic Management Microkernel (TMM) may restart when a virtual server has an HTTP/2 profile with Application Layer Protocol Negotiation (ALPN) enabled and it processes traffic where the ALPN extension size is zero.

Affected

32 ranges· showing 25
VendorProductVersion rangeFixed in
f5big-ip_aam
f5big-ip_access_policy_manager>= 12.1.0 < 12.1.4.112.1.4.1
f5big-ip_access_policy_manager>= 13.0.0 < 13.1.1.513.1.1.5
f5big-ip_access_policy_manager>= 14.0.0 < 14.1.0.214.1.0.2
f5big-ip_advanced_firewall_manager>= 12.1.0 < 12.1.4.112.1.4.1
f5big-ip_advanced_firewall_manager>= 13.0.0 < 13.1.1.513.1.1.5
f5big-ip_advanced_firewall_manager>= 14.0.0 < 14.1.0.214.1.0.2
f5big-ip_afm
f5big-ip_apm
f5big-ip_application_acceleration_manager>= 12.1.0 < 12.1.4.112.1.4.1
f5big-ip_application_acceleration_manager>= 13.0.0 < 13.1.1.513.1.1.5
f5big-ip_application_acceleration_manager>= 14.0.0 < 14.1.0.214.1.0.2
f5big-ip_application_security_manager>= 12.1.0 < 12.1.4.112.1.4.1
f5big-ip_application_security_manager>= 13.0.0 < 13.1.1.513.1.1.5
f5big-ip_application_security_manager>= 14.0.0 < 14.1.0.214.1.0.2
f5big-ip_asm
f5big-ip_link_controller
f5big-ip_link_controller>= 12.1.0 < 12.1.4.112.1.4.1
f5big-ip_link_controller>= 13.0.0 < 13.1.1.513.1.1.5
f5big-ip_link_controller>= 14.0.0 < 14.1.0.214.1.0.2
f5big-ip_local_traffic_manager>= 12.1.0 < 12.1.4.112.1.4.1
f5big-ip_local_traffic_manager>= 13.0.0 < 13.1.1.513.1.1.5
f5big-ip_local_traffic_manager>= 14.0.0 < 14.1.0.214.1.0.2
f5big-ip_ltm
f5big-ip_pem