medium5.3
CVE-2019-6647
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, when processing authentication attempts for control-plane users MCPD…
Impact
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, when processing authentication attempts for control-plane users MCPD leaks a small amount of memory. Under rare conditions attackers with access to the management interface could eventually deplete memory on the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F5 | Big-Ip Local Traffic Manager | from 11.5.1 through 11.6.4 from 12.1.0 through 12.1.4 from 13.0.0 through 13.1.1 Versions 14.0.0, 14.1.0 |
| F5 | Big-Ip Advanced Firewall Manager | from 11.5.1 through 11.6.4 from 12.1.0 through 12.1.4 from 13.0.0 through 13.1.1 Versions 14.0.0, 14.1.0 |
| F5 | Big-Ip Application Acceleration Manager | from 11.5.1 through 11.6.4 from 12.1.0 through 12.1.4 from 13.0.0 through 13.1.1 Versions 14.0.0, 14.1.0 |
| F5 | Big-Ip Analytics | from 11.5.1 through 11.6.4 from 12.1.0 through 12.1.4 from 13.0.0 through 13.1.1 Versions 14.0.0, 14.1.0 |
| F5 | Big-Ip Access Policy Manager | from 11.5.1 through 11.6.4 from 12.1.0 through 12.1.4 from 13.0.0 through 13.1.1 Versions 14.0.0, 14.1.0 |
| F5 | Big-Ip Application Security Manager | from 11.5.1 through 11.6.4 from 12.1.0 through 12.1.4 from 13.0.0 through 13.1.1 Versions 14.0.0, 14.1.0 |
| F5 | Big-Ip Edge Gateway | from 11.5.1 through 11.6.4 from 12.1.0 through 12.1.4 from 13.0.0 through 13.1.1 Versions 14.0.0, 14.1.0 |
| F5 | Big-Ip Fraud Protection Service | from 11.5.1 through 11.6.4 from 12.1.0 through 12.1.4 from 13.0.0 through 13.1.1 Versions 14.0.0, 14.1.0 |
| F5 | Big-Ip Global Traffic Manager | from 11.5.1 through 11.6.4 from 12.1.0 through 12.1.4 from 13.0.0 through 13.1.1 Versions 14.0.0, 14.1.0 |
| F5 | Big-Ip Link Controller | from 11.5.1 through 11.6.4 from 12.1.0 through 12.1.4 from 13.0.0 through 13.1.1 Versions 14.0.0, 14.1.0 |
| F5 | Big-Ip Policy Enforcement Manager | from 11.5.1 through 11.6.4 from 12.1.0 through 12.1.4 from 13.0.0 through 13.1.1 Versions 14.0.0, 14.1.0 |
| F5 | Big-Ip Webaccelerator | from 11.5.1 through 11.6.4 from 12.1.0 through 12.1.4 from 13.0.0 through 13.1.1 Versions 14.0.0, 14.1.0 |