CVE-2024-23805

Summary

CVE-2024-23805 is a newly disclosed vulnerability affecting the Traffic Management Microkernel (TMM) in F5 BIG-IP systems. Malicious requests can cause the TMM to terminate, potentially leading to denial-of-service conditions. This issue is particularly relevant for the Application Visibility and Reporting module when an HTTP Analytics profile with URLs enabled is configured on a virtual server, along with specific DB variables. Similar risks apply to BIG-IP Advanced WAF and ASM when DoS or Bot Defense profiles are enabled with these DB variables. It is essential to note that the DB variables in question are not enabled by default, and their use is described in F5 Knowledge Base article K30875743. The vulnerability does not affect software versions that have reached their End of Technical Support (EoTS).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.