PT-2019-18220 · F5 · F5 Big-Ip
CVE-2019-6638
·
Publicado
2019-07-03
·
Atualizado
2023-02-03
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
F5 BIG-IP versions 14.0.0 through 14.0.0.4
F5 BIG-IP versions 14.1.0 through 14.1.0.5
Description
The issue arises from malformed HTTP requests made to an undisclosed iControl REST endpoint, which can cause an infinite loop of the restjavad process.
Recommendations
For F5 BIG-IP versions 14.0.0 through 14.0.0.4, update to a version that is not affected by this issue.
For F5 BIG-IP versions 14.1.0 through 14.1.0.5, update to a version that is not affected by this issue.
As a temporary workaround, consider restricting access to the undisclosed iControl REST endpoint to minimize the risk of exploitation.
Correção
Infinite Loop
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
F5 Big-Ip