CVE-2019-6592

On BIG-IP 14.1.0-14.1.0.1, TMM may restart and produce a core file when validating SSL certificates in client SSL or server SSL profiles

published February 26, 2019

CVSS
โ€”
EPSS
1%
Percentile
63.4
In the wild
Unconfirmed
What it is

โš ๏ธ A simple SSL certificate validation can trigger a restart on BIG-IP 14.1.0-14.1.0.1, potentially leaving your service in the lurch! ๐Ÿ”„ Think of it like a restaurant that loses power every time it checks a new delivery of ingredients โ€” dishes stop coming out, and hungry customers are left waiting. It's not a total blackout, but a frustrating hiccup in service! When TMM restarts, it generates a core file, which could lead to service disruption. While this isn't a catastrophic failure, it can create annoying downtime, especially in critical environments where uptime is essential. Regular disruptions can frustrate users and affect overall performance.

Put simply

Think of it like a restaurant that loses power every time it checks a new delivery of ingredients โ€” dishes stop coming out, and hungry customers are left waiting. It's not a total blackout, but a frustrating hiccup in service! This vulnerability arises during the SSL certificate validation process in BIG-IP versions 14.1.0-14.1.0.1, causing the Traffic Management Microkernel (TMM) to unexpectedly restart.

What to do

When TMM restarts, it generates a core file, which could lead to service disruption. While this isn't a catastrophic failure, it can create annoying downtime, especially in critical environments where uptime is essential. Regular disruptions can frustrate users and affect overall performance. Upgrade your BIG-IP system to versions later than 14.1.0.1 to mitigate this issue. Ensure you regularly check for updates and apply them promptly to maintain system stability and security. You've got this! A quick update will keep your systems running smoothly and your users happy. ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01037 ยท 63.4th percentile
Published
2019-02-26T15:00Z
EPSS history
Timeline
  • 26 FEB 15:00Z
    On BIG-IP 14.1.0-14.1.0.1, TMM may restart and produce a core file when validating SSL certificates in client SSL or server SSL profiles
    cvelistv5