7.5

CVE-2023-29163

BIG-IP UDP Profile vulnerability

When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F5 ≫ Big-ip Access Policy Manager Version >= 14.1.0 < 14.1.5.4
F5 ≫ Big-ip Access Policy Manager Version >= 15.1.0 < 15.1.8.2
F5 ≫ Big-ip Access Policy Manager Version >= 16.1.0 < 16.1.3.4
F5 ≫ Big-ip Access Policy Manager Version17.0.0
F5 ≫ Big-ip Advanced Firewall Manager Version >= 14.1.0 < 14.1.5.4
F5 ≫ Big-ip Advanced Firewall Manager Version >= 15.1.0 < 15.1.8.2
F5 ≫ Big-ip Advanced Firewall Manager Version >= 16.1.0 < 16.1.3.4
F5 ≫ Big-ip Advanced Web Application Firewall Version >= 14.1.0 < 14.1.5.4
F5 ≫ Big-ip Advanced Web Application Firewall Version >= 15.1.0 < 15.1.8.2
F5 ≫ Big-ip Advanced Web Application Firewall Version >= 16.1.0 < 16.1.3.4
F5 ≫ Big-ip Analytics Version >= 14.1.0 < 14.1.5.4
F5 ≫ Big-ip Analytics Version >= 15.1.0 < 15.1.8.2
F5 ≫ Big-ip Analytics Version >= 16.1.0 < 16.1.3.4
F5 ≫ Big-ip Analytics Version17.0.0
F5 ≫ Big-ip Application Acceleration Manager Version >= 14.1.0 < 14.1.5.4
F5 ≫ Big-ip Application Acceleration Manager Version >= 15.1.0 < 15.1.8.2
F5 ≫ Big-ip Application Acceleration Manager Version >= 16.1.0 < 16.1.3.4
F5 ≫ Big-ip Application Security Manager Version >= 14.1.0 < 14.1.5.4
F5 ≫ Big-ip Application Security Manager Version >= 15.1.0 < 15.1.8.2
F5 ≫ Big-ip Application Security Manager Version >= 16.1.0 < 16.1.3.4
F5 ≫ Big-ip Application Visibility And Reporting Version >= 14.1.0 < 14.1.5.4
F5 ≫ Big-ip Application Visibility And Reporting Version >= 15.1.0 < 15.1.8.2
F5 ≫ Big-ip Application Visibility And Reporting Version >= 16.1.0 < 16.1.3.4
F5 ≫ Big-ip Carrier-grade Nat Version >= 14.1.0 < 14.1.5.4
F5 ≫ Big-ip Carrier-grade Nat Version >= 15.1.0 < 15.1.8.2
F5 ≫ Big-ip Carrier-grade Nat Version >= 16.1.0 < 16.1.3.4
F5 ≫ Big-ip Carrier-grade Nat Version17.0.0
F5 ≫ Big-ip Ddos Hybrid Defender Version >= 14.1.0 < 14.1.5.4
F5 ≫ Big-ip Ddos Hybrid Defender Version >= 15.1.0 < 15.1.8.2
F5 ≫ Big-ip Ddos Hybrid Defender Version >= 16.1.0 < 16.1.3.4
F5 ≫ Big-ip Ddos Hybrid Defender Version17.0.0
F5 ≫ Big-ip Domain Name System Version >= 14.1.0 < 14.1.5.4
F5 ≫ Big-ip Domain Name System Version >= 15.1.0 < 15.1.8.2
F5 ≫ Big-ip Domain Name System Version >= 16.1.0 < 16.1.3.4
F5 ≫ Big-ip Domain Name System Version17.0.0
F5 ≫ Big-ip Edge Gateway Version >= 14.1.0 < 14.1.5.4
F5 ≫ Big-ip Edge Gateway Version >= 15.1.0 < 15.1.8.2
F5 ≫ Big-ip Edge Gateway Version >= 16.1.0 < 16.1.3.4
F5 ≫ Big-ip Edge Gateway Version17.0.0
F5 ≫ Big-ip Fraud Protection Service Version >= 14.1.0 < 14.1.5.4
F5 ≫ Big-ip Fraud Protection Service Version >= 15.1.0 < 15.1.8.2
F5 ≫ Big-ip Fraud Protection Service Version >= 16.1.0 < 16.1.3.4
F5 ≫ Big-ip Global Traffic Manager Version >= 14.1.0 < 14.1.5.4
F5 ≫ Big-ip Global Traffic Manager Version >= 15.1.0 < 15.1.8.2
F5 ≫ Big-ip Global Traffic Manager Version >= 16.1.0 < 16.1.3.4
F5 ≫ Big-ip Global Traffic Manager Version17.0.0
F5 ≫ Big-ip Link Controller Version >= 14.1.0 < 14.1.5.4
F5 ≫ Big-ip Link Controller Version >= 15.1.0 < 15.1.8.2
F5 ≫ Big-ip Link Controller Version >= 16.1.0 < 16.1.3.4
F5 ≫ Big-ip Link Controller Version17.0.0
F5 ≫ Big-ip Local Traffic Manager Version >= 14.1.0 < 14.1.5.4
F5 ≫ Big-ip Local Traffic Manager Version >= 15.1.0 < 15.1.8.2
F5 ≫ Big-ip Local Traffic Manager Version >= 16.1.0 < 16.1.3.4
F5 ≫ Big-ip Local Traffic Manager Version17.0.0
F5 ≫ Big-ip Policy Enforcement Manager Version >= 14.1.0 < 14.1.5.4
F5 ≫ Big-ip Policy Enforcement Manager Version >= 15.1.0 < 15.1.8.2
F5 ≫ Big-ip Policy Enforcement Manager Version >= 16.1.0 < 16.1.3.4
F5 ≫ Big-ip Ssl Orchestrator Version >= 14.1.0 < 14.1.5.4
F5 ≫ Big-ip Ssl Orchestrator Version >= 15.1.0 < 15.1.8.2
F5 ≫ Big-ip Ssl Orchestrator Version >= 16.1.0 < 16.1.3.4
F5 ≫ Big-ip Ssl Orchestrator Version17.0.0
F5 ≫ Big-ip Webaccelerator Version >= 14.1.0 < 14.1.5.4
F5 ≫ Big-ip Webaccelerator Version >= 15.1.0 < 15.1.8.2
F5 ≫ Big-ip Webaccelerator Version >= 16.1.0 < 16.1.3.4
F5 ≫ Big-ip Webaccelerator Version17.0.0
F5 ≫ Big-ip Websafe Version >= 14.1.0 < 14.1.5.4
F5 ≫ Big-ip Websafe Version >= 15.1.0 < 15.1.8.2
F5 ≫ Big-ip Websafe Version >= 16.1.0 < 16.1.3.4
F5 ≫ Big-ip Websafe Version17.0.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.62% 0.448
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
f5sirt@f5.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://my.f5.com/manage/s/article/K20145107
Vendor Advisory