First published: Wed Feb 14 2024(Updated: )
When a BIG-IP PEM classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. This issue affects classification engines using signatures released between 09-08-2022 and 02-16-2023. See the table below for a complete list of affected classification signature files.
Affected Software | Affected Version | How to fix |
---|---|---|
F5 BIG-IP Policy Enforcement Manager | >=17.1.0<=17.1.1=3 | 3 |
F5 BIG-IP Policy Enforcement Manager | >=16.1.0<=16.1.4=3 | 3 |
F5 BIG-IP Policy Enforcement Manager | >=15.1.0<=15.1.10=3 | 3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of F5-K000135946 is considered critical due to potential service disruption.
To fix F5-K000135946, update the BIG-IP PEM software to the latest version that is not affected by this vulnerability.
F5-K000135946 affects BIG-IP PEM versions 15.1.x, 16.1.x, and 17.1.x for specified versions released between 09-08-2022 and 02-16-2023.
F5-K000135946 can cause the Traffic Management Microkernel (TMM) to terminate, potentially leading to service interruptions.
Currently, there are no known workarounds for F5-K000135946, and updating to a patched version is recommended.