PT-2019-18243

CVE-2019-6661

·

Published

2019-11-15

·

Updated

2019-11-19

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM versions 11.5.1 through 11.6.5 F5 BIG-IP APM versions 12.1.0 through 12.1.4.1 F5 BIG-IP APM versions 13.1.0 through 13.1.3.1 F5 BIG-IP APM versions 14.0.0 through 14.0.1 F5 BIG-IP APM versions 14.1.0 through 14.1.2
Description The issue arises when the BIG-IP APM system processes certain requests, leading to the APD/APMD daemon consuming excessive resources.
Recommendations For F5 BIG-IP APM versions 11.5.1 through 11.6.5, update to a version outside of the affected range to resolve the issue. For F5 BIG-IP APM versions 12.1.0 through 12.1.4.1, update to a version outside of the affected range to resolve the issue. For F5 BIG-IP APM versions 13.1.0 through 13.1.3.1, update to a version outside of the affected range to resolve the issue. For F5 BIG-IP APM versions 14.0.0 through 14.0.1, update to a version outside of the affected range to resolve the issue. For F5 BIG-IP APM versions 14.1.0 through 14.1.2, update to a version outside of the affected range to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾