Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2019-6678: BIG‑IP may reboot when packet filter is turned on

CVE-2019-6678 · published 6 years ago

Summary

Certain versions of F5 BIG‑IP can cause the traffic manager process to restart if the packet filter feature is enabled. This can lead to brief service interruptions and affect traffic handling. Apply the vendor's recommended update or disable the packet filter until a fix is installed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
f5	big-ip_access_policy_manager	>= 13.1.0, < 13.1.3.2 >= 14.0.0, < 14.0.1.1 >= 14.1.0, < 14.1.2.3 >= 15.0.0, < 15.0.1.1 `cpe:2.3:a:f5:big-ip_access_policy_manager::::::::`
f5	big-ip_advanced_firewall_manager	>= 13.1.0, < 13.1.3.2 >= 14.0.0, < 14.0.1.1 >= 14.1.0, < 14.1.2.3 >= 15.0.0, < 15.0.1.1 `cpe:2.3:a:f5:big-ip_advanced_firewall_manager::::::::`
f5	big-ip_analytics	>= 13.1.0, < 13.1.3.2 >= 14.0.0, < 14.0.1.1 >= 14.1.0, < 14.1.2.3 >= 15.0.0, < 15.0.1.1 `cpe:2.3:a:f5:big-ip_analytics::::::::`
f5	big-ip_application_acceleration_manager	>= 13.1.0, < 13.1.3.2 >= 14.0.0, < 14.0.1.1 >= 14.1.0, < 14.1.2.3 >= 15.0.0, < 15.0.1.1 `cpe:2.3:a:f5:big-ip_application_acceleration_manager::::::::`
f5	big-ip_application_security_manager	>= 13.1.0, < 13.1.3.2 >= 14.0.0, < 14.0.1.1 >= 14.1.0, < 14.1.2.3 >= 15.0.0, < 15.0.1.1 `cpe:2.3:a:f5:big-ip_application_security_manager::::::::`
f5	big-ip_domain_name_system	>= 13.1.0, < 13.1.3.2 >= 14.0.0, < 14.0.1.1 >= 14.1.0, < 14.1.2.3 >= 15.0.0, < 15.0.1.1 `cpe:2.3:a:f5:big-ip_domain_name_system::::::::`
f5	big-ip_edge_gateway	>= 13.1.0, < 13.1.3.2 >= 14.0.0, < 14.0.1.1 >= 14.1.0, < 14.1.2.3 >= 15.0.0, < 15.0.1.1 `cpe:2.3:a:f5:big-ip_edge_gateway::::::::`
f5	big-ip_fraud_protection_service	>= 13.1.0, < 13.1.3.2 >= 14.0.0, < 14.0.1.1 >= 14.1.0, < 14.1.2.3 >= 15.0.0, < 15.0.1.1 `cpe:2.3:a:f5:big-ip_fraud_protection_service::::::::`
f5	big-ip_global_traffic_manager	>= 13.1.0, < 13.1.3.2 >= 14.0.0, < 14.0.1.1 >= 14.1.0, < 14.1.2.3 >= 15.0.0, < 15.0.1.1 `cpe:2.3:a:f5:big-ip_global_traffic_manager::::::::`
f5	big-ip_link_controller	>= 13.1.0, < 13.1.3.2 >= 14.0.0, < 14.0.1.1 >= 14.1.0, < 14.1.2.3 >= 15.0.0, < 15.0.1.1 `cpe:2.3:a:f5:big-ip_link_controller::::::::`
f5	big-ip_local_traffic_manager	>= 13.1.0, < 13.1.3.2 >= 14.0.0, < 14.0.1.1 >= 14.1.0, < 14.1.2.3 >= 15.0.0, < 15.0.1.1 `cpe:2.3:a:f5:big-ip_local_traffic_manager::::::::`
f5	big-ip_policy_enforcement_manager	>= 13.1.0, < 13.1.3.2 >= 14.0.0, < 14.0.1.1 >= 14.1.0, < 14.1.2.3 >= 15.0.0, < 15.0.1.1 `cpe:2.3:a:f5:big-ip_policy_enforcement_manager::::::::`
f5	big-ip_webaccelerator	>= 13.1.0, < 13.1.3.2 >= 14.0.0, < 14.0.1.1 >= 14.1.0, < 14.1.2.3 >= 15.0.0, < 15.0.1.1 `cpe:2.3:a:f5:big-ip_webaccelerator::::::::`

Original advisory text

On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, the TMM process may restart when the packet filter feature is enabled.

References

https://support.f5.com/csp/article/K04897373 Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

5.3 Medium

Exploitation

<1% chance of attack within 30 days

Timeline

Published23 Dec 2019

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2019-6678 · NVD

Track software like this

Free during beta