First published: Wed Feb 05 2025(Updated: )
When the Session Initiation Protocol (SIP) application layer gateway (ALG) profile and the SIP router ALG profile are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.
Affected Software | Affected Version | How to fix |
---|---|---|
F5 BIG-IP Service Proxy for Kubernetes | =1.9.0>=1.8.0<=1.8.2>=1.7.0<=1.7.6 | 1.9.11.7.7 |
F5 BIG-IP | >=17.1.0<=17.1.1 | 17.1.2 |
F5 BIG-IP | >=16.1.0<=16.1.4 | 16.1.5 |
F5 BIG-IP | >=15.1.0<=15.1.10 | - |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of F5-K000139780 is considered critical due to its impact on the Traffic Management Microkernel (TMM).
To fix F5-K000139780, upgrade to the appropriate patched version of F5 BIG-IP or BIG-IP Next SPK as specified in the advisory.
F5-K000139780 affects specific versions of F5 BIG-IP, including versions 17.1.0 to 17.1.1, 16.1.0 to 16.1.4, 15.1.0 to 15.1.10, and earlier versions of the BIG-IP Next SPK.
The main issue in F5-K000139780 is that undisclosed traffic can cause the TMM to terminate when the SIP application layer gateway profiles are configured.
The vendor for the vulnerability F5-K000139780 is F5 Networks.