CVE-2019-6596

Name of the Vulnerable Software and Affected Versions BIG-IP versions 11.5.1 through 11.5.8 BIG-IP versions 11.6.1 through 11.6.3.2 BIG-IP versions 12.1.0 through 12.1.3.6 BIG-IP versions 13.0.0 through 13.1.1.1 BIG-IP versions 14.0.0 through 14.0.0.2

Description The issue occurs when processing fragmented ClientHello messages in a DTLS session, which may cause memory corruption and eventually lead to a crash. Only systems offering DTLS connections via APM are impacted.

Recommendations For BIG-IP versions 11.5.1 through 11.5.8, update to a version outside of this range to resolve the issue. For BIG-IP versions 11.6.1 through 11.6.3.2, update to a version outside of this range to resolve the issue. For BIG-IP versions 12.1.0 through 12.1.3.6, update to a version outside of this range to resolve the issue. For BIG-IP versions 13.0.0 through 13.1.1.1, update to a version outside of this range to resolve the issue. For BIG-IP versions 14.0.0 through 14.0.0.2, update to a version outside of this range to resolve the issue.