CVE-2024-21763

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

When BIG-IP AFM Device DoS or DoS profile is configured with NXDOMAIN attack vector and bad actor detection, undisclosed queries can cause the Traffic Management Microkernel (TMM) to terminate. NOTE: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
F5	BIG-IP	>= 17.1.0, < 17.1.1; >= 16.1.0, < 16.1.4; >= 15.1.0, < 15.1.10
f5	big-ip	>= 15.1.0, < 15.1.10; >= 16.1.0, < 16.1.4; >= 17.1.0, < 17.1.1

References

https://my.f5.com/manage/s/article/K000137521Vendor Advisory
https://my.f5.com/manage/s/article/K000137521Vendor Advisory

Timeline

Published: Feb 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-217649.8In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, the product uses hard-coded credentials, which may allow an attacker to CVE-2024-217655.5Electronic Delivery Check System (Doboku) Ver.18.1.0 and earlier, Electronic Delivery Check System (Dentsu) Ver.12.1.0 and earlier, Electron CVE-2024-217666.7Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software before version 2024.1 may allow an authenticated user to pote CVE-2024-217679.4A remote attacker may be able to bypass access control of Commend WS203VICM by creating a malicious request.CVE-2024-217696.7Uncontrolled search path in some Intel(R) Ethernet Connection I219-LM install software may allow an authenticated user to potentially enable CVE-2024-21776.8A Cross Window Forgery vulnerability exists within GitLab CE/EE affecting all versions from 16.3 prior to 16.11.5, 17.0 prior to 17.0.3, and CVE-2024-217717.5For unspecified traffic patterns, BIG-IP AFM IPS engine may spend an excessive amount of time matching the traffic against signatures, resul CVE-2024-217727.8Uncontrolled search path in some Intel(R) Advisor software before version 2024.0 may allow an authenticated user to potentially enable escal CVE-2024-217738.8Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to execute CVE-2024-217746.7Uncontrolled search path in some Intel(R) Processor Identification Utility software before versions 6.10.34.1129, 7.1.6 may allow an authent CVE-2024-217758.8Zoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in report exporting featu CVE-2024-217777.3Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro Edition Design software before version 23.4 may allow an authenticated user t