CVE-2014-6031

MEDIUM

F5 BIG-IP LTM 10.x-11.6.0 Authenticated DoS via mcpq Daemon Buffer Overflow

Title source: llm
STIX 2.1

Description

Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x before 11.4.1 HF9, 11.5.x before 11.5.2 HF1, and 11.6.0 before HF4, and Enterprise Manager 2.1.0 through 2.3.0 and 3.x before 3.1.1 HF5 allows remote authenticated administrators to cause a denial of service via unspecified vectors.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
https://support.f5.com/csp/article/K16196

Scores

CVSS v3 4.9
EPSS 0.0047
EPSS Percentile 64.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-119
Status published
Products (50)
f5/big-ip_access_policy_manager 10.1.0
f5/big-ip_access_policy_manager 10.2.0
f5/big-ip_access_policy_manager 10.2.1
f5/big-ip_access_policy_manager 10.2.2
f5/big-ip_access_policy_manager 10.2.3
f5/big-ip_access_policy_manager 10.2.4
f5/big-ip_access_policy_manager 11.0.0
f5/big-ip_access_policy_manager 11.1.0
f5/big-ip_access_policy_manager 11.2.0
f5/big-ip_access_policy_manager 11.2.1
... and 40 more
Published Jun 08, 2017
Tracked Since Feb 18, 2026