K36228121 : BIG-IP DHCPv6 vulnerability CVE-2019-6643

Security Advisory Description

An attacker sending specifically crafted DHCPv6 requests through a BIG-IP virtual server configured with a DHCPv6 profile may be able to cause the Traffic Management Microkernel (TMM) process to produce a core file. (CVE-2019-6643)

Impact

This vulnerability may allow an attacker who can route DHCPv6 requests to the BIG-IP system to cause a remote denial of service (DoS) on the BIG-IP system. If configured in a high-availability (HA) pair, the active BIG-IP device fails over to the standby BIG-IP device.