First published: Wed May 03 2023(Updated: )
When a UDP profile with Idle Timeout set to Immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.
Affected Software | Affected Version | How to fix |
---|---|---|
F5 BIG-IP | =17.0.0 | 17.1.0 |
F5 BIG-IP | =16.1.2.2 | 16.1.3.4 |
F5 BIG-IP | =15.1.5.1 | 15.1.8.2 |
F5 BIG-IP | =14.1.4.6 | 14.1.5.4 |
F5 BIG-IP |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
F5-K20145107 is classified as a high severity vulnerability due to its potential to cause termination of the Traffic Management Microkernel.
To fix F5-K20145107, ensure that you are using a patched version of the F5 BIG-IP software as specified in the advisory.
F5-K20145107 affects various versions of F5 BIG-IP, particularly those with UDP profiles configured with an Idle Timeout set to Immediate or 0.
Exploitation of F5-K20145107 can lead to unexpected termination of the Traffic Management Microkernel, disrupting traffic handling on the virtual server.
To determine if your version of F5 BIG-IP is vulnerable to F5-K20145107, compare your version against the list of affected versions provided in the advisory.