CVE-2019-6684
published 2019-12-23CVE-2019-6684: On versions 15.0.0-15.0.1.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, under certain conditions, a multi-bladed BIG-IP Virtual…
PriorityP340high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
1.04%
60.3th percentile
On versions 15.0.0-15.0.1.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, under certain conditions, a multi-bladed BIG-IP Virtual Clustered Multiprocessing (vCMP) may drop broadcast packets when they are rebroadcast to the vCMP guest secondary blades. An attacker can leverage the fragmented broadcast IP packets to perform any type of fragmentation-based attack.
Affected
71 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| f5 | big-ip | — | — |
| f5 | big-ip | — | — |
| f5 | big-ip | — | — |
| f5 | big-ip | — | — |
| f5 | big-ip | — | — |
| f5 | big-ip_aam | — | — |
| f5 | big-ip_access_policy_manager | 11.5.2 – 11.6.5 | — |
| f5 | big-ip_access_policy_manager | 12.1.0 – 12.1.5 | — |
| f5 | big-ip_access_policy_manager | >= 13.0.0 < 13.1.3.2 | 13.1.3.2 |
| f5 | big-ip_access_policy_manager | >= 14.0.0 < 14.1.2.3 | 14.1.2.3 |
| f5 | big-ip_access_policy_manager | >= 15.0.0 < 15.1.0 | 15.1.0 |
| f5 | big-ip_advanced_firewall_manager | 11.5.2 – 11.6.5 | — |
| f5 | big-ip_advanced_firewall_manager | 12.1.0 – 12.1.5 | — |
| f5 | big-ip_advanced_firewall_manager | >= 13.0.0 < 13.1.3.2 | 13.1.3.2 |
| f5 | big-ip_advanced_firewall_manager | >= 14.0.0 < 14.1.2.3 | 14.1.2.3 |
| f5 | big-ip_advanced_firewall_manager | >= 15.0.0 < 15.1.0 | 15.1.0 |
| f5 | big-ip_afm | — | — |
| f5 | big-ip_analytics | — | — |
| f5 | big-ip_analytics | 11.5.2 – 11.6.5 | — |
| f5 | big-ip_analytics | 12.1.0 – 12.1.5 | — |
| f5 | big-ip_analytics | >= 13.0.0 < 13.1.3.2 | 13.1.3.2 |
| f5 | big-ip_analytics | >= 14.0.0 < 14.1.2.3 | 14.1.2.3 |
| f5 | big-ip_analytics | >= 15.0.0 < 15.1.0 | 15.1.0 |
| f5 | big-ip_apm | — | — |
| f5 | big-ip_application_acceleration_manager | 11.5.2 – 11.6.5 | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
F5
CVE-2019-6684: On versions 15
vendor_f5·2019-12-23·CVSS 7.5
CVE-2019-6684 [HIGH] CVE-2019-6684: On versions 15
CVE-2019-6684: On versions 15
On versions 15.0.0-15.0.1.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, under certain conditions, a multi-bladed BIG-IP Virtual Clustered Multiprocessing (vCMP) may drop broadcast packets when they are rebroadcast to the vCMP guest secondary blades. An attacker can leverage the fragmented broadcast IP packets to perform any type of fragmentation-based attack.
Affected Products: BIG-IP AAM, BIG-IP AFM, BIG-IP APM, BIG-IP ASM, BIG-IP Analytics, BIG-IP DNS, BIG-IP FPS, BIG-IP GTM, BIG-IP LTM, BIG-IP Link Controller, BIG-IP PEM
Affected Versions: 11.5.2 - 11.6.5; 12.1.0 - 12.1.5; 13.0.0 - 13.1.3.2; 14.0.0 - 14.1.2.3; 15.0.0 - 15.1.0
F5 Advisory Articles: K95117754
F5 References: https://support.f5.com/csp/article/K95117754
GHSA
GHSA-2r69-jgh4-vvpm: On versions 15
ghsa_unreviewed·2022-05-24
CVE-2019-6684 [HIGH] GHSA-2r69-jgh4-vvpm: On versions 15
On versions 15.0.0-15.0.1.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, under certain conditions, a multi-bladed BIG-IP Virtual Clustered Multiprocessing (vCMP) may drop broadcast packets when they are rebroadcast to the vCMP guest secondary blades. An attacker can leverage the fragmented broadcast IP packets to perform any type of fragmentation-based attack.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-12-23
Published