CVE-2019-6619

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 12.1.0 through 12.1.4 F5 BIG-IP versions 13.0.0 through 13.1.1.4 F5 BIG-IP versions 14.0.0 through 14.1.0.1

Description The Traffic Management Microkernel (TMM) may restart when a virtual server has an HTTP/2 profile with Application Layer Protocol Negotiation (ALPN) enabled and it processes traffic where the ALPN extension size is zero.

Recommendations For versions 12.1.0 through 12.1.4, consider disabling the ALPN extension to prevent TMM restarts until a patch is available. For versions 13.0.0 through 13.1.1.4, consider disabling the ALPN extension to prevent TMM restarts until a patch is available. For versions 14.0.0 through 14.1.0.1, consider disabling the ALPN extension to prevent TMM restarts until a patch is available.