1. Home
  2. CVE Database
  3. CVE-2014-6031
MEDIUM · 4.9

CVE-2014-6031

Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x before 11.4.1 HF9, 11.5.x before 11.5.2 HF1, and 11.6.0 before HF4, and Enterpr...

Vulnerability Description

Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x before 11.4.1 HF9, 11.5.x before 11.5.2 HF1, and 11.6.0 before HF4, and Enterprise Manager 2.1.0 through 2.3.0 and 3.x before 3.1.1 HF5 allows remote authenticated administrators to cause a denial of service via unspecified vectors.

CVSS Score

4.9

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
F5Big-Ip Local Traffic Manager10.0.0
F5Big-Ip Application Acceleration Manager11.4.0
F5Big-Ip Advanced Firewall Manager11.3.0
F5Big-Ip Analytics11.0.0
F5Big-Ip Access Policy Manager10.1.0
F5Big-Ip Application Security Manager10.0.0
F5Big-Ip Edge Gateway10.1.0
F5Big-Ip Global Traffic Manager10.0.0
F5Big-Ip Link Controller10.0.0
F5Big-Ip Policy Enforcement Manager11.3.0
F5Big-Ip Protocol Security Module10.0.0
F5Big-Ip Webaccelerator10.0.0
F5Big-Ip Wan Optimization Manager10.0.0
F5Big-Ip Enterprise Manager2.1.0

Related Weaknesses (CWE)

CWE-119

References

FAQ

What is CVE-2014-6031?

CVE-2014-6031 is a vulnerability with a CVSS score of 4.9 (MEDIUM). Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x before 11.4.1 HF9, 11.5.x before 11.5.2 HF1, and 11.6.0 before HF4, and Enterpr...

How severe is CVE-2014-6031?

CVE-2014-6031 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-6031?

Check the references section above for vendor advisories and patch information. Affected products include: F5 Big-Ip Local Traffic Manager, F5 Big-Ip Application Acceleration Manager, F5 Big-Ip Advanced Firewall Manager, F5 Big-Ip Analytics, F5 Big-Ip Access Policy Manager.