Undisclosed Responses in HTTP/2 Configured BIG-IP Systems Can Cause TMM Termination

CVE-2024-23314

What is CVE-2024-23314?

A vulnerability impacting F5 Networks' BIG-IP and BIG-IP Next systems arises when HTTP/2 is configured. This can lead to undefined responses causing the Traffic Management Microkernel (TMM) to unexpectedly terminate. It is essential for organizations using these platforms to evaluate their configurations and apply necessary patches to prevent system disruptions, particularly for software versions that are still under support.

References