CVE-2019-6610 - On BIG-IP versions 14.0.0-14.0.0.4, 13.0.0-13.1.1.1, 12.1.0-12.1.4, 11.6.0-11.6.3.4, and 11.5.1-11.5.8, the system is vulnerable to a denial of service attack when performing URL classification

Back Back to CVE browser

HIGH

On BIG-IP versions 14.0.0-14.0.0.4, 13.0.0-13.1.1.1, 12.1.0-12.1.4, 11.6.0-11.6.3.4, and 11.5.1-11.5.8, the system is vulnerable to a denial of service attack when performing URL classification

Published Apr 11, 2019

8.6

HIGH

CVSS 3.0

EPSS 1.06%

Description

On BIG-IP versions 14.0.0-14.0.0.4, 13.0.0-13.1.1.1, 12.1.0-12.1.4, 11.6.0-11.6.3.4, and 11.5.1-11.5.8, the system is vulnerable to a denial of service attack when performing URL classification.

Affected products

Vendor F5 Product n/a Default
unknown
Affected
- 11.5.1-11.5.8
- 11.6.0-11.6.3.4
- 12.1.0-12.1.4
- 13.0.0-13.1.1.1
- 14.0.0-14.0.0.4

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
F5	n/a	unknown	Affected 11.5.1-11.5.8 11.6.0-11.6.3.4 12.1.0-12.1.4 13.0.0-13.1.1.1 14.0.0-14.0.0.4

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-16169
Advisory
https://support.f5.com/csp/article/K42465020
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-16169		Advisory
https://support.f5.com/csp/article/K42465020		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner f5

Published Apr 11, 2019

Updated Aug 4, 2024

Reserved Jan 22, 2019

Link CVE-2019-6610

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-6610

Red Hat

No data

ENISA EUVD

Assigner f5

Published Apr 11, 2019

Updated Aug 4, 2024

Link EUVD-2019-16169

GitHub

No data