383
VMScore

CVE-2019-6647

Published: 04/09/2019 Updated: 24/08/2020
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, when processing authentication attempts for control-plane users MCPD leaks a small amount of memory. Under rare conditions attackers with access to the management interface could eventually deplete memory on the system.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

f5 big-ip local traffic manager

f5 big-ip local traffic manager 14.0.0

f5 big-ip local traffic manager 14.1.0

f5 big-ip advanced firewall manager

f5 big-ip advanced firewall manager 14.0.0

f5 big-ip advanced firewall manager 14.1.0

f5 big-ip application acceleration manager 14.0.0

f5 big-ip application acceleration manager

f5 big-ip application acceleration manager 14.1.0

f5 big-ip analytics 14.1.0

f5 big-ip analytics

f5 big-ip analytics 14.0.0

f5 big-ip access policy manager

f5 big-ip access policy manager 14.0.0

f5 big-ip access policy manager 14.1.0

f5 big-ip application security manager

f5 big-ip application security manager 14.0.0

f5 big-ip application security manager 14.1.0

f5 big-ip edge gateway 14.1.0

f5 big-ip edge gateway

f5 big-ip edge gateway 14.0.0

f5 big-ip fraud protection service

f5 big-ip fraud protection service 14.0.0

f5 big-ip fraud protection service 14.1.0

f5 big-ip global traffic manager

f5 big-ip global traffic manager 14.0.0

f5 big-ip global traffic manager 14.1.0

f5 big-ip link controller

f5 big-ip link controller 14.1.0

f5 big-ip link controller 14.0.0

f5 big-ip policy enforcement manager

f5 big-ip policy enforcement manager 14.0.0

f5 big-ip policy enforcement manager 14.1.0

f5 big-ip webaccelerator

f5 big-ip webaccelerator 14.0.0

f5 big-ip webaccelerator 14.1.0

f5 big-ip domain name system

f5 big-ip domain name system 14.1.0

f5 big-ip domain name system 14.0.0