Race Condition in F5 SSL Orchestrator with SNAT Enabled

CVE-2019-6627

What is CVE-2019-6627?

A race condition vulnerability in the F5 SSL Orchestrator can cause unexpected behavior under specific circumstances. When the SSL Forward Proxy enforces a bypass action for a transparent virtual server with SNAT enabled, it may lead to a restart of the Traffic Management Microkernel (TMM). This occurrence is rare, but it poses risks to the stability of the system's SSL handling capabilities, potentially impacting service continuity for users.

References