UpHeron
All vulnerabilities

Servers and applications

CVE-2014-6031

Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x before 11.4.1 HF9, 11.5.x before 11.5.2 HF1, and 11.6.0 before HF4, and Enterprise Manager 2.1.0 through 2.3.0 and 3.x before 3.1.1 HF5 allows remote authenticated administrators to cause a denial of service via unspecified vectors.

Severity
Medium 4.9
Published
8 Jun 2017
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
1.1% in the next 30 daysHigher than 65% of CVEs. EPSS by FIRST, 11 Nov 2026
Weakness
Memory buffer errors (CWE-119)
Attack
Over the network · Needs an administrator account · No user action needed
Attacker can
Take it down
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Sources
NVD

Affected software

SoftwareAffected versions
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_access_policy_manager
  • Version 11.6.0
  • Version 11.5.2
  • Version 11.5.1
  • Version 11.5.0
All 17 release lines
  • Version 10.1.0
  • Version 10.2.0
  • Version 10.2.1
  • Version 10.2.2
  • Version 10.2.3
  • Version 10.2.4
  • Version 11.0.0
  • Version 11.1.0
  • Version 11.2.0
  • Version 11.2.1
  • Version 11.3.0
  • Version 11.4.0
  • Version 11.4.1
  • Version 11.5.0
  • Version 11.5.1
  • Version 11.5.2
  • Version 11.6.0
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_local_traffic_manager
  • Version 11.6.0
  • Version 11.5.2
  • Version 11.5.1
  • Version 11.5.0
All 19 release lines
  • Version 10.0.0
  • Version 10.0.1
  • Version 10.1.0
  • Version 10.2.0
  • Version 10.2.1
  • Version 10.2.2
  • Version 10.2.3
  • Version 10.2.4
  • Version 11.0.0
  • Version 11.1.0
  • Version 11.2.0
  • Version 11.2.1
  • Version 11.3.0
  • Version 11.4.0
  • Version 11.4.1
  • Version 11.5.0
  • Version 11.5.1
  • Version 11.5.2
  • Version 11.6.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2014-6031
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2014-6031