F5-K000148969: Low severity f5 big-ip next vulnerability
There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module. When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with quadratic complexity, resulting in excess CPU resources being used while parsing the value.
Affected Software
Event History
Frequently Asked Questions
What is the severity of F5-K000148969?
The severity of F5-K000148969 is classified as low.
How do I fix F5-K000148969?
To fix F5-K000148969, update your affected F5 software to a version that addresses the vulnerability.
Which versions are affected by F5-K000148969?
F5-K000148969 affects F5 BIG-IP Next Service Proxy versions from 1.7.0 to 1.9.2 and BIG-IP Next Cloud-Native Network Functions versions from 1.1.0 to 1.3.3.
What component of CPython is involved in F5-K000148969?
F5-K000148969 involves the 'http.cookies' standard library module within CPython.
Can F5-K000148969 lead to system resource depletion?
Yes, F5-K000148969 can result in excess CPU resource consumption due to the quadratic complexity of the cookie parsing algorithm.