Unrated severityNVD Advisory· Published Jul 3, 2019· Updated Aug 4, 2024

CVE-2019-6638

Description

On BIG-IP 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, Malformed http requests made to an undisclosed iControl REST endpoint can lead to infinite loop of the restjavad process.

Affected products

F5, Inc./Big IPllm-fuzzy2 versions
>=14.0.0, <=14.0.0.4 || >=14.1.0, <=14.1.0.5+ 1 more
- (no CPE)range: >=14.0.0, <=14.0.0.4 || >=14.1.0, <=14.1.0.5
- (no CPE)range: BIG-IP 14.1.0-14.1.0.5

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/109106mitrevdb-entryx_refsource_BID
support.f5.com/csp/article/K67825238mitrex_refsource_CONFIRM
support.f5.com/csp/article/K67825238mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000