F5-K000138912: Medium severity f5 big-ip and big-iq centralized management vulnerability
When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel (TMM) to terminate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of F5-K000138912?
The severity of F5-K000138912 is classified as high due to the potential for Traffic Management Microkernel (TMM) termination.
How do I fix F5-K000138912?
To fix F5-K000138912, upgrade to the recommended versions of the F5 BIG-IP software as specified in the advisory.
What are the affected versions for F5-K000138912?
Affected versions for F5-K000138912 include F5 BIG-IP versions 15.1.x, 16.1.x, and 17.1.x within specific ranges.
Who is affected by F5-K000138912?
Organizations using F5 BIG-IP with specific SSL profile configurations may be affected by F5-K000138912.
What causes the issue in F5-K000138912?
The issue in F5-K000138912 is caused by non-default alert timeout settings combined with undisclosed traffic conditions.