Description
When a BIG-IP PEM classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. This issue affects classification engines using signatures released between 09-08-2022 and 02-16-2023. See the table in the F5 Security Advisory for a complete list of affected classification signature files. NOTE: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Metrics
CVSS 3.1 7.5/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| F5 | BIG-IP | — |
| f5 | big-ip_pem | >= 17.1.0, <= 17.1.1; >= 16.1.0, <= 16.1.4; >= 15.1.0, <= 15.1.10 |
References
- https://my.f5.com/manage/s/article/K000135946Vendor Advisory
- https://my.f5.com/manage/s/article/K000135946Vendor Advisory
Timeline
- Published
- Feb 14, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed