CVE-2014-6031

Severity: medium (CVSS 4.9 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-06-08 · updated 2026-06-17
Weakness: CWE-119

Description

Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x before 11.4.1 HF9, 11.5.x before 11.5.2 HF1, and 11.6.0 before HF4, and Enterprise Manager 2.1.0 through 2.3.0 and 3.x before 3.1.1 HF5 allows remote authenticated administrators to cause a denial of service via unspecified vectors.

Affected products

F5 BIG-IP APM: 10.1.0, 10.2.0, 10.2.1, 10.2.2, 10.2.3, 10.2.4 (+11)
BIG-IP: 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2 (+1)
F5 Big-Ip Analytics: 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0 (+5)
F5 Networks, Inc. BIG-IP (AAM): 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2, 11.6.0
BIG-IP ASM: 10.0.0, 10.1.0, 10.2.0, 10.2.1, 10.2.2, 10.2.3 (+12)
F5 Big-Ip Edge Gateway: 10.1.0, 10.2.0, 10.2.1, 10.2.2, 10.2.3, 10.2.4 (+5)
F5 Networks BIG-IP, Enterprise Manager: 2.1.0, 2.2.0, 2.3.0, 3.0.0, 3.1.0, 3.1.1
F5 Big-Ip Global Traffic Manager: 10.0.0, 10.1.0, 10.2.0, 10.2.1, 10.2.2, 10.2.3 (+12)
F5 Big-Ip Link Controller: 10.0.0, 10.1.0, 10.2.0, 10.2.1, 10.2.2, 10.2.3 (+12)
F5 BIG-IP (LTM): 10.0.0, 10.0.1, 10.1.0, 10.2.0, 10.2.1, 10.2.2 (+13)
F5 Networks, Inc. BIG-IP (PEM): 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2 (+1)
F5 Big-Ip Protocol Security Module: 10.0.0, 10.1.0, 10.2.0, 10.2.1, 10.2.2, 10.2.3 (+8)
F5 Big-Ip Wan Optimization Manager: 10.0.0, 10.1.0, 10.2.0, 10.2.1, 10.2.2, 10.2.3 (+6)
F5 Big-Ip Webaccelerator: 10.0.0, 10.1.0, 10.2.0, 10.2.1, 10.2.2, 10.2.3 (+6)

References

Get alerted when CVE-2014-6031 or the next vulnerability affects your stack