When a BIG-IP PEM classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. This issue affects classification engines using signatures released between 09-08-2022 and 02-16-2023. See the table in the F5 Security Advisory for a complete list of affected classification signature files. NOTE: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| F5 | BIG-IP | unknown |
|
Configuration 1 [-]
|
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-21408 | When a BIG-IP PEM classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. This issue affects classification engines using signatures released between 09-08-2022 and 02-16-2023. See the table in the F5 Security Advisory for a complete list of affected classification signature files. NOTE: Software versions which have reached End of Technical Support (EoTS) are not evaluated |
| Link | Providers |
|---|---|
| https://my.f5.com/manage/s/article/K000135946 |
|
Thu, 12 Dec 2024 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
F5
F5 big-ip Policy Enforcement Manager |
|
| Weaknesses | CWE-787 | |
| CPEs | cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* | |
| Vendors & Products |
F5
F5 big-ip Policy Enforcement Manager |
MITRE
Status: PUBLISHED
Assigner: f5
Published:
Updated: 2024-08-21T15:47:02.775Z
Reserved: 2024-02-01T22:13:58.474Z
Link: CVE-2024-23982
Vulnrichment
Updated: 2024-08-01T23:13:08.424Z
NVD
Status : Analyzed
Published: 2024-02-14T17:15:14.637
Modified: 2024-12-12T19:07:57.403
Link: CVE-2024-23982
Redhat
No data.
OpenCVE Enrichment
No data.