CVE-2014-6031: F5 BIG-IP Access Policy Manager

Medium severity, CVSS 4.9. EPSS: 1.1% chance of exploitation in the next 30 days.

Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x before 11.4.1 HF9, 11.5.x before 11.5.2 HF1, and 11.6.0 before HF4, and Enterprise Manager 2.1.0 through 2.3.0 and 3.x before 3.1.1 HF5 allows remote authenticated administrators to cause a denial of service via unspecified vectors.

Affected products

  • F5 BIG-IP Access Policy Manager: version 10.1.0 only; version 10.2.0 only; version 10.2.1 only; version 10.2.2 only; version 10.2.3 only; version 10.2.4 only; …
  • F5 BIG-IP Advanced Firewall Manager: version 11.3.0 only; version 11.4.0 only; version 11.4.1 only; version 11.5.0 only; version 11.5.1 only; version 11.5.2 only; …
  • F5 BIG-IP Analytics: version 11.0.0 only; version 11.1.0 only; version 11.2.0 only; version 11.2.1 only; version 11.3.0 only; version 11.4.0 only; …
  • F5 BIG-IP Application Acceleration Manager: version 11.4.0 only; version 11.4.1 only; version 11.5.0 only; version 11.5.1 only; version 11.5.2 only; version 11.6.0 only
  • F5 BIG-IP Application Security Manager: version 10.0.0 only; version 10.1.0 only; version 10.2.0 only; version 10.2.1 only; version 10.2.2 only; version 10.2.3 only; …
  • F5 BIG-IP Edge Gateway: version 10.1.0 only; version 10.2.0 only; version 10.2.1 only; version 10.2.2 only; version 10.2.3 only; version 10.2.4 only; …
  • F5 BIG-IP Enterprise Manager: version 2.1.0 only; version 2.2.0 only; version 2.3.0 only; version 3.0.0 only; version 3.1.0 only; version 3.1.1 only
  • F5 BIG-IP Global Traffic Manager: version 10.0.0 only; version 10.1.0 only; version 10.2.0 only; version 10.2.1 only; version 10.2.2 only; version 10.2.3 only; …
  • F5 BIG-IP Link Controller: version 10.0.0 only; version 10.1.0 only; version 10.2.0 only; version 10.2.1 only; version 10.2.2 only; version 10.2.3 only; …
  • F5 BIG-IP Local Traffic Manager: version 10.0.0 only; version 10.0.1 only; version 10.1.0 only; version 10.2.0 only; version 10.2.1 only; version 10.2.2 only; …
  • F5 BIG-IP Policy Enforcement Manager: version 11.3.0 only; version 11.4.0 only; version 11.4.1 only; version 11.5.0 only; version 11.5.1 only; version 11.5.2 only; …
  • F5 BIG-IP Protocol Security Module: version 10.0.0 only; version 10.1.0 only; version 10.2.0 only; version 10.2.1 only; version 10.2.2 only; version 10.2.3 only; …
  • F5 BIG-IP WAN Optimization Manager: version 10.0.0 only; version 10.1.0 only; version 10.2.0 only; version 10.2.1 only; version 10.2.2 only; version 10.2.3 only; …
  • F5 BIG-IP Webaccelerator: version 10.0.0 only; version 10.1.0 only; version 10.2.0 only; version 10.2.1 only; version 10.2.2 only; version 10.2.3 only; …

Published 2017-06-08. Last modified 2026-06-17.