Vulnerability CVE-2014-6031
Published: 2017-06-08

Description:
Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x before 11.4.1 HF9, 11.5.x before 11.5.2 HF1, and 11.6.0 before HF4, and Enterprise Manager 2.1.0 through 2.3.0 and 3.x before 3.1.1 HF5 allows remote authenticated administrators to cause a denial of service via unspecified vectors.

Type:

CWE-119

 (Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:N/AC:L/Au:S/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
4/10
2.9/10
8/10
Exploit range
Attack complexity
Authentication
Remote
Low
Single time
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
F5 -> Big-ip local traffic manager 
F5 -> Big-ip application security manager 
F5 -> Big-ip analytics 
F5 -> Big-ip edge gateway 
F5 -> Big-ip application acceleration manager 
F5 -> Big-ip link controller 
F5 -> Big-ip enterprise manager 
F5 -> Big-ip global traffic manager 
F5 -> Big-ip access policy manager 
F5 -> Big-ip webaccelerator 
F5 -> Big-ip wan optimization manager 
F5 -> Big-ip policy enforcement manager 
F5 -> Big-ip advanced firewall manager 
F5 -> Big-ip protocol security manager 
F5 -> Big-ip protocol security module 

 References:
https://support.f5.com/csp/article/K16196
Copyright 2024, cxsecurity.com

 

Back to Top