Multiple F5 BIG-IP Products CVE-2019-6605 Denial of Service Vulnerability

Bugtraq ID:	107629
Class:	Configuration Error
CVE:	CVE-2019-6605
Remote:	Yes
Local:	No
Published:	Mar 21 2019 12:00AM
Updated:	Mar 21 2019 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	F5 BIG-IP WebAccelerator 12.0 F5 BIG-IP WebAccelerator 11.6.3 F5 BIG-IP WebAccelerator 11.6.2 F5 BIG-IP WebAccelerator 11.6.1 F5 BIG-IP WebAccelerator 11.5.8 F5 BIG-IP WebAccelerator 11.5.7 F5 BIG-IP WebAccelerator 11.5.6 F5 BIG-IP WebAccelerator 11.5.5 F5 BIG-IP WebAccelerator 11.5.1 F5 BIG-IP PEM 12.0 F5 BIG-IP PEM 11.6.3 F5 BIG-IP PEM 11.6.2 F5 BIG-IP PEM 11.6.1 F5 BIG-IP PEM 11.5.8 F5 BIG-IP PEM 11.5.7 F5 BIG-IP PEM 11.5.6 F5 BIG-IP PEM 11.5.3 F5 BIG-IP PEM 11.5.1 F5 BIG-IP PEM 11.5.5 F5 BIG-IP PEM 11.5.4 F5 BIG-IP LTM 11.6.3 F5 BIG-IP LTM 11.6.2 F5 BIG-IP LTM 11.6.1 F5 BIG-IP LTM 11.5.8 F5 BIG-IP LTM 11.5.7 F5 BIG-IP LTM 11.5.6 F5 BIG-IP LTM 11.5.5 F5 BIG-IP LTM 11.5.3 F5 BIG-IP LTM 11.5.2 F5 BIG-IP LTM 11.5.1 F5 BIG-IP LTM 11.5.4 F5 BIG-IP Link Controller 11.6.3 F5 BIG-IP Link Controller 11.6.2 F5 BIG-IP Link Controller 11.6.1 F5 BIG-IP GTM 12.0 F5 BIG-IP GTM 11.6.3 F5 BIG-IP GTM 11.6.2 F5 BIG-IP GTM 11.6.1 F5 BIG-IP FPS 12.0 F5 BIG-IP FPS 11.6.3 F5 BIG-IP FPS 11.6.2 F5 BIG-IP FPS 11.6.1 F5 BIG-IP Edge Gateway 11.6.3 F5 BIG-IP Edge Gateway 11.6.2 F5 BIG-IP Edge Gateway 11.6.1 F5 BIG-IP DNS 12.0 F5 BIG-IP DNS 11.6.3 F5 BIG-IP DNS 11.6.2 F5 BIG-IP DNS 11.6.1 F5 BIG-IP ASM 11.6.3 F5 BIG-IP ASM 11.6.2 F5 BIG-IP ASM 11.6.1 F5 BIG-IP APM 11.6.3 F5 BIG-IP APM 11.6.2 F5 BIG-IP APM 11.6.1 F5 BIG-IP Analytics 11.6.3 F5 BIG-IP Analytics 11.6.2 F5 BIG-IP Analytics 11.6.1 F5 BIG-IP Analytics 11.5.8 F5 BIG-IP Analytics 11.5.7 F5 BIG-IP Analytics 11.5.6 F5 BIG-IP Analytics 11.5.3 F5 BIG-IP Analytics 11.5.2 F5 BIG-IP Analytics 11.5.1 F5 BIG-IP Analytics 11.5.5 F5 BIG-IP Analytics 11.5.4 F5 BIG-IP AFM 11.6.3 F5 BIG-IP AFM 11.6.1 F5 BIG-IP AFM 11.5.8 F5 BIG-IP AFM 11.5.7 F5 BIG-IP AFM 11.5.6 F5 BIG-IP AFM 11.5.3 F5 BIG-IP AFM 11.5.2 F5 BIG-IP AFM 11.5.1 F5 BIG-IP AFM 11.6.2 F5 BIG-IP AFM 11.5.5 F5 BIG-IP AFM 11.5.4 F5 BIG-IP AAM 11.6.3 F5 BIG-IP AAM 11.6.2 F5 BIG-IP AAM 11.6.1 F5 BIG-IP AAM 11.5.8 F5 BIG-IP AAM 11.5.7 F5 BIG-IP AAM 11.5.5 F5 BIG-IP AAM 11.5.3 F5 BIG-IP AAM 11.5.2 F5 BIG-IP AAM 11.5.1 F5 BIG-IP AAM 11.5.4 F5 BIG-IP PEM 12.0 F5 BIG-IP LTM 12.0 F5 BIG-IP Link Controller 12.0 F5 BIG-IP ASM 12.0 F5 BIG-IP APM 12.0 F5 BIG-IP Analytics 12.0 F5 BIG-IP AFM 12.0 F5 BIG-IP AAM 12.0
Not Vulnerable:	F5 BIG-IP WebAccelerator 12.1 F5 BIG-IP WebAccelerator 11.6.4 F5 BIG-IP WebAccelerator 11.5.9 F5 BIG-IP PEM 11.6.4 F5 BIG-IP PEM 11.5.9 F5 BIG-IP PEM 12.1.0 F5 BIG-IP LTM 11.6.4 F5 BIG-IP LTM 11.5.9 F5 BIG-IP LTM 12.1.0 F5 BIG-IP Link Controller 11.6.4 F5 BIG-IP Link Controller 12.1.0 F5 BIG-IP GTM 12.1 F5 BIG-IP GTM 11.6.4 F5 BIG-IP FPS 12.1 F5 BIG-IP FPS 11.6.4 F5 BIG-IP Edge Gateway 12.1 F5 BIG-IP DNS 11.6.4 F5 BIG-IP DNS 12.1.0 F5 BIG-IP ASM 11.6.4 F5 BIG-IP ASM 12.1.0 F5 BIG-IP APM 11.6.4 F5 BIG-IP APM 12.1.0 F5 BIG-IP Analytics 11.6.4 F5 BIG-IP Analytics 11.5.9 F5 BIG-IP Analytics 12.1.0 F5 BIG-IP AFM 11.6.4 F5 BIG-IP AFM 11.5.9 F5 BIG-IP AFM 12.1.0 F5 BIG-IP AAM 11.6.4 F5 BIG-IP AAM 11.5.9 F5 BIG-IP AAM 12.1.0

Multiple F5 BIG-IP Products CVE-2019-6605 Denial of Service Vulnerability

Multiple F5 BIG-IP Products are prone to a denial-of-service vulnerability.

Attackers can exploit this issue to cause a denial of service condition.

BIG-IP 11.5.1 through 11.5.8, 11.6.1 through 11.6.3, and 12.0.0 are vulnerable.

Multiple F5 BIG-IP Products CVE-2019-6605 Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].