NetSight
medium4.9

CVE-2014-6031

Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x before 11.4.1 HF9, 11.5.x before 11.5.…

Impact

Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x before 11.4.1 HF9, 11.5.x before 11.5.2 HF1, and 11.6.0 before HF4, and Enterprise Manager 2.1.0 through 2.3.0 and 3.x before 3.1.1 HF5 allows remote authenticated administrators to cause a denial of service via unspecified vectors.

Affected products

VendorProductAffected versions
F5Big-Ip Local Traffic Manager
Versions 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.2.1, 10.2.2
F5Big-Ip Application Acceleration Manager
Versions 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2, 11.6.0
F5Big-Ip Advanced Firewall Manager
Versions 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2
F5Big-Ip Analytics
Versions 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0
F5Big-Ip Access Policy Manager
Versions 10.1.0, 10.2.0, 10.2.1, 10.2.2, 10.2.3, 10.2.4
F5Big-Ip Application Security Manager
Versions 10.0.0, 10.1.0, 10.2.0, 10.2.1, 10.2.2, 10.2.3
F5Big-Ip Edge Gateway
Versions 10.1.0, 10.2.0, 10.2.1, 10.2.2, 10.2.3, 10.2.4
F5Big-Ip Global Traffic Manager
Versions 10.0.0, 10.1.0, 10.2.0, 10.2.1, 10.2.2, 10.2.3
F5Big-Ip Link Controller
Versions 10.0.0, 10.1.0, 10.2.0, 10.2.1, 10.2.2, 10.2.3
F5Big-Ip Policy Enforcement Manager
Versions 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2
F5Big-Ip Protocol Security Module
Versions 10.0.0, 10.1.0, 10.2.0, 10.2.1, 10.2.2, 10.2.3
F5Big-Ip Webaccelerator
Versions 10.0.0, 10.1.0, 10.2.0, 10.2.1, 10.2.2, 10.2.3

Weakness classification

References