CVE-2019-6631: F5 BIG-IP vulnerability

CVE-2019-6631: On BIG-IP 11.5.1-11.6.4, iRules performing HTTP header manipulation may cause an interruption to service wh...

On BIG-IP 11.5.1-11.6.4, iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated HTTP profile, in specific circumstances, when the requests do not strictly conform to RFCs.

UnknownCVSS not scoredNot KEV-listedUpdatedAug 4, 2024, 20:23 UTC (UTC+00:00)

Security readout for executives and security teams

CVE-2019-6631 is a service interruption issue in legacy F5 BIG-IP. It affects BIG-IP 11.5.1 through 11.6.4 when specific iRules modify HTTP headers on a virtual server with an HTTP profile and receive requests that do not strictly follow RFCs. Exposure is likely limited to F5 BIG-IP 11.5.1-11.6.4 deployments using virtual servers with HTTP profiles and iRules that manipulate HTTP headers. Internet-facing application delivery tiers are the main business concern because interruption there can affect downstream applications. Prioritize if legacy BIG-IP appliances front critical or external applications. Without evidence of active exploitation or a CVSS score in the bundle, urgency should be based on exposure and business impact, not hype. Mitigation focus: Identify BIG-IP systems running versions 11.5.1 through 11.6.4.; Review virtual servers for HTTP profiles and header-manipulating iRules.; Check F5 K19501795 for official fixes, mitigations, and support status..

Prepared: Jun 6, 2026, 20:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2019-6631 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup

Vulnerability profileCVE Program record

Severity: Unknown
CVSS: Not scored
Known Exploited: No
Published: Jul 3, 2019, 17:54 UTC (UTC+00:00)

Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors

0Timeline events

0ADP providers

3Source links

CVSS and timeline data

No CVSS vectors or timeline events were available in the normalized CVE source material.

Source materials

CVE List V5 sourceCVE List V5
https://support.f5.com/csp/article/K19501795CVE reference · x_refsource_CONFIRM
https://support.f5.com/csp/article/K19501795?utm_source=f5support&amp%3Butm_medium=RSSCVE reference · x_refsource_CONFIRM

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus

F5BIG-IPBIG-IP 11.5.1-11.6.4Listed

Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.