Excessive Signature Matching Time Causes Traffic Disruption in BIG-IP AFM IPS Engine

CVE-2024-21771

What is CVE-2024-21771?

The BIG-IP AFM IPS engine by F5 Networks is susceptible to a vulnerability that may cause significant operational challenges. Under certain traffic patterns, the engine could take an unusually long time when matching incoming traffic against predefined signatures, leading to the potential restart of the Traffic Management Microkernel (TMM). This situation not only impacts the performance of network management but can also disrupt critical traffic flow. It is important to note that versions of the affected software that have reached End of Technical Support (EoTS) have not been evaluated for this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References