cbcvebase.
CVE-2019-6629
published 2019-07-03

CVE-2019-6629: On BIG-IP 14.1.0-14.1.0.5, undisclosed SSL traffic to a virtual server configured with a Client SSL profile may cause TMM to fail and restart. The Client SSL…

high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
On BIG-IP 14.1.0-14.1.0.5, undisclosed SSL traffic to a virtual server configured with a Client SSL profile may cause TMM to fail and restart. The Client SSL profile must have session tickets enabled and use DHE cipher suites to be affected. This only impacts the data plane, there is no impact to the control plane.

Affected

27 ranges· showing 25
VendorProductVersion rangeFixed in
f5big-ip
f5big-ip_aam
f5big-ip_access_policy_manager14.1.0.1 – 14.1.0.5
f5big-ip_advanced_firewall_manager14.1.0.1 – 14.1.0.5
f5big-ip_afm
f5big-ip_analytics
f5big-ip_analytics14.1.0.1 – 14.1.0.5
f5big-ip_apm
f5big-ip_application_acceleration_manager14.1.0.1 – 14.1.0.5
f5big-ip_application_security_manager14.1.0.1 – 14.1.0.5
f5big-ip_asm
f5big-ip_dns
f5big-ip_domain_name_system14.1.0.1 – 14.1.0.5
f5big-ip_edge_gateway
f5big-ip_edge_gateway14.1.0.1 – 14.1.0.5
f5big-ip_global_traffic_manager14.1.0.1 – 14.1.0.5
f5big-ip_gtm
f5big-ip_link_controller
f5big-ip_link_controller14.1.0.1 – 14.1.0.5
f5big-ip_local_traffic_manager14.1.0.1 – 14.1.0.5
f5big-ip_ltm
f5big-ip_pem
f5big-ip_policy_enforcement_manager14.1.0.1 – 14.1.0.5
f5big-ip_webaccelerator
f5big-ip_webaccelerator14.1.0.1 – 14.1.0.5