CVE-2019-6638 : Security Advisory and Response

In BIG-IP versions 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, an infinite loop of the restjavad process can occur when malformed HTTP requests are sent to an undisclosed iControl REST endpoint.

Understanding CVE-2019-6638

This CVE affects F5's BIG-IP versions 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, leading to a Denial of Service (DoS) vulnerability.

What is CVE-2019-6638?

CVE-2019-6638 is a vulnerability in F5's BIG-IP software that allows an attacker to trigger an infinite loop in the restjavad process by sending malformed HTTP requests to a specific iControl REST endpoint.

The Impact of CVE-2019-6638

The vulnerability can result in a Denial of Service condition, causing the affected system to become unresponsive or slow down significantly.

Technical Details of CVE-2019-6638

This section provides more in-depth technical information about the CVE.

Vulnerability Description

An infinite loop of the restjavad process can be triggered by sending malformed HTTP requests to an undisclosed iControl REST endpoint in BIG-IP versions 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4.

Affected Systems and Versions

Product: BIG-IP
Vendor: F5
Affected Versions: BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4

Exploitation Mechanism

Attackers can exploit this vulnerability by sending specially crafted HTTP requests to the undisclosed iControl REST endpoint, causing the restjavad process to enter an infinite loop.

Mitigation and Prevention

To address CVE-2019-6638, follow these mitigation steps:

Immediate Steps to Take

Apply the necessary patches provided by F5 to fix the vulnerability.
Monitor network traffic for any suspicious activity that could indicate exploitation of the vulnerability.

Long-Term Security Practices

Regularly update and patch all software and firmware to prevent known vulnerabilities.
Implement network segmentation and access controls to limit the impact of potential attacks.
Conduct regular security assessments and penetration testing to identify and address security weaknesses.

Patching and Updates

Ensure that you regularly check for updates and patches released by F5 for the affected BIG-IP versions to mitigate the risk of exploitation.