What’s Vulnerable › Vulnerabilities

CVE-2019-6629

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-07-03 · updated 2026-06-17

Description

On BIG-IP 14.1.0-14.1.0.5, undisclosed SSL traffic to a virtual server configured with a Client SSL profile may cause TMM to fail and restart. The Client SSL profile must have session tickets enabled and use DHE cipher suites to be affected. This only impacts the data plane, there is no impact to the control plane.

Affected products

• F5 BIG-IP APM: from 14.1.0.1 through 14.1.0.5
• BIG-IP: from 14.1.0.1 through 14.1.0.5
• F5 Big-Ip Analytics: from 14.1.0.1 through 14.1.0.5
• F5 Networks, Inc. BIG-IP (AAM): from 14.1.0.1 through 14.1.0.5
• BIG-IP ASM: from 14.1.0.1 through 14.1.0.5
• F5 BIG-IP DNS: from 14.1.0.1 through 14.1.0.5
• F5 Big-Ip Edge Gateway: from 14.1.0.1 through 14.1.0.5
• F5 Big-Ip Global Traffic Manager: from 14.1.0.1 through 14.1.0.5
• F5 Big-Ip Link Controller: from 14.1.0.1 through 14.1.0.5
• F5 BIG-IP (LTM): from 14.1.0.1 through 14.1.0.5
• F5 Networks, Inc. BIG-IP (PEM): from 14.1.0.1 through 14.1.0.5
• F5 Big-Ip Webaccelerator: from 14.1.0.1 through 14.1.0.5
• F5 Big-Ip Websafe: from 14.1.0.1 through 14.1.0.5

References

• https://support.f5.com/csp/article/K95434410
• https://support.f5.com/csp/article/K95434410?utm_source=f5support&amp%3Butm_medium=RSS
• https://support.f5.com/csp/article/K95434410
• https://support.f5.com/csp/article/K95434410?utm_source=f5support&amp%3Butm_medium=RSS

Get alerted when CVE-2019-6629 or the next vulnerability affects your stack