CVE-2023-29163

EPSS 0.62%
Veröffentlicht 03.05.2023 15:15:13
Zuletzt bearbeitet 21.11.2024 07:56:38
Erkennungen
Login

BIG-IP UDP Profile vulnerability

When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 76 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

F5 ≫ Big-ip Access Policy Manager Version >= 14.1.0 < 14.1.5.4

F5 ≫ Big-ip Access Policy Manager Version >= 15.1.0 < 15.1.8.2

F5 ≫ Big-ip Access Policy Manager Version >= 16.1.0 < 16.1.3.4

F5 ≫ Big-ip Access Policy Manager Version 17.0.0

F5 ≫ Big-ip Advanced Firewall Manager Version >= 14.1.0 < 14.1.5.4

F5 ≫ Big-ip Advanced Firewall Manager Version >= 15.1.0 < 15.1.8.2

F5 ≫ Big-ip Advanced Firewall Manager Version >= 16.1.0 < 16.1.3.4

F5 ≫ Big-ip Advanced Firewall Manager Version 17.0.0

F5 ≫ Big-ip Advanced Web Application Firewall Version >= 14.1.0 < 14.1.5.4

F5 ≫ Big-ip Advanced Web Application Firewall Version >= 15.1.0 < 15.1.8.2

F5 ≫ Big-ip Advanced Web Application Firewall Version >= 16.1.0 < 16.1.3.4

F5 ≫ Big-ip Advanced Web Application Firewall Version 17.0.0

F5 ≫ Big-ip Analytics Version >= 14.1.0 < 14.1.5.4

F5 ≫ Big-ip Analytics Version >= 15.1.0 < 15.1.8.2

F5 ≫ Big-ip Analytics Version >= 16.1.0 < 16.1.3.4

F5 ≫ Big-ip Analytics Version 17.0.0

F5 ≫ Big-ip Application Acceleration Manager Version >= 14.1.0 < 14.1.5.4

F5 ≫ Big-ip Application Acceleration Manager Version >= 15.1.0 < 15.1.8.2

F5 ≫ Big-ip Application Acceleration Manager Version >= 16.1.0 < 16.1.3.4

F5 ≫ Big-ip Application Acceleration Manager Version 17.0.0

F5 ≫ Big-ip Application Security Manager Version >= 14.1.0 < 14.1.5.4

F5 ≫ Big-ip Application Security Manager Version >= 15.1.0 < 15.1.8.2

F5 ≫ Big-ip Application Security Manager Version >= 16.1.0 < 16.1.3.4

F5 ≫ Big-ip Application Security Manager Version 17.0.0

F5 ≫ Big-ip Application Visibility And Reporting Version >= 14.1.0 < 14.1.5.4

F5 ≫ Big-ip Application Visibility And Reporting Version >= 15.1.0 < 15.1.8.2

F5 ≫ Big-ip Application Visibility And Reporting Version >= 16.1.0 < 16.1.3.4

F5 ≫ Big-ip Application Visibility And Reporting Version 17.0.0

F5 ≫ Big-ip Carrier-grade Nat Version >= 14.1.0 < 14.1.5.4

F5 ≫ Big-ip Carrier-grade Nat Version >= 15.1.0 < 15.1.8.2

F5 ≫ Big-ip Carrier-grade Nat Version >= 16.1.0 < 16.1.3.4

F5 ≫ Big-ip Carrier-grade Nat Version 17.0.0

F5 ≫ Big-ip Ddos Hybrid Defender Version >= 14.1.0 < 14.1.5.4

F5 ≫ Big-ip Ddos Hybrid Defender Version >= 15.1.0 < 15.1.8.2

F5 ≫ Big-ip Ddos Hybrid Defender Version >= 16.1.0 < 16.1.3.4

F5 ≫ Big-ip Ddos Hybrid Defender Version 17.0.0

F5 ≫ Big-ip Domain Name System Version >= 14.1.0 < 14.1.5.4

F5 ≫ Big-ip Domain Name System Version >= 15.1.0 < 15.1.8.2

F5 ≫ Big-ip Domain Name System Version >= 16.1.0 < 16.1.3.4

F5 ≫ Big-ip Domain Name System Version 17.0.0

F5 ≫ Big-ip Edge Gateway Version >= 14.1.0 < 14.1.5.4

F5 ≫ Big-ip Edge Gateway Version >= 15.1.0 < 15.1.8.2

F5 ≫ Big-ip Edge Gateway Version >= 16.1.0 < 16.1.3.4

F5 ≫ Big-ip Edge Gateway Version 17.0.0

F5 ≫ Big-ip Fraud Protection Service Version >= 14.1.0 < 14.1.5.4

F5 ≫ Big-ip Fraud Protection Service Version >= 15.1.0 < 15.1.8.2

F5 ≫ Big-ip Fraud Protection Service Version >= 16.1.0 < 16.1.3.4

F5 ≫ Big-ip Fraud Protection Service Version 17.0.0

F5 ≫ Big-ip Global Traffic Manager Version >= 14.1.0 < 14.1.5.4

F5 ≫ Big-ip Global Traffic Manager Version >= 15.1.0 < 15.1.8.2

F5 ≫ Big-ip Global Traffic Manager Version >= 16.1.0 < 16.1.3.4

F5 ≫ Big-ip Global Traffic Manager Version 17.0.0

F5 ≫ Big-ip Link Controller Version >= 14.1.0 < 14.1.5.4

F5 ≫ Big-ip Link Controller Version >= 15.1.0 < 15.1.8.2

F5 ≫ Big-ip Link Controller Version >= 16.1.0 < 16.1.3.4

F5 ≫ Big-ip Link Controller Version 17.0.0

F5 ≫ Big-ip Local Traffic Manager Version >= 14.1.0 < 14.1.5.4

F5 ≫ Big-ip Local Traffic Manager Version >= 15.1.0 < 15.1.8.2

F5 ≫ Big-ip Local Traffic Manager Version >= 16.1.0 < 16.1.3.4

F5 ≫ Big-ip Local Traffic Manager Version 17.0.0

F5 ≫ Big-ip Policy Enforcement Manager Version >= 14.1.0 < 14.1.5.4

F5 ≫ Big-ip Policy Enforcement Manager Version >= 15.1.0 < 15.1.8.2

F5 ≫ Big-ip Policy Enforcement Manager Version >= 16.1.0 < 16.1.3.4

F5 ≫ Big-ip Policy Enforcement Manager Version 17.0.0

F5 ≫ Big-ip Ssl Orchestrator Version >= 14.1.0 < 14.1.5.4

F5 ≫ Big-ip Ssl Orchestrator Version >= 15.1.0 < 15.1.8.2

F5 ≫ Big-ip Ssl Orchestrator Version >= 16.1.0 < 16.1.3.4

F5 ≫ Big-ip Ssl Orchestrator Version 17.0.0

F5 ≫ Big-ip Webaccelerator Version >= 14.1.0 < 14.1.5.4

F5 ≫ Big-ip Webaccelerator Version >= 15.1.0 < 15.1.8.2

F5 ≫ Big-ip Webaccelerator Version >= 16.1.0 < 16.1.3.4

F5 ≫ Big-ip Webaccelerator Version 17.0.0

F5 ≫ Big-ip Websafe Version >= 14.1.0 < 14.1.5.4

F5 ≫ Big-ip Websafe Version >= 15.1.0 < 15.1.8.2

F5 ≫ Big-ip Websafe Version >= 16.1.0 < 16.1.3.4

F5 ≫ Big-ip Websafe Version 17.0.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.62%	0.448

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
F5	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://my.f5.com/manage/s/article/K20145107

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-29163

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-29163

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-29163

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2023-29163