BIG-IP PEM Classification Profile Vulnerability

CVE-2024-23982

What is CVE-2024-23982?

A vulnerability in F5 BIG-IP systems occurs when a PEM classification profile is active on a UDP virtual server. In this scenario, specific undisclosed requests can lead to the termination of the Traffic Management Microkernel (TMM). This issue particularly impacts classification engines that utilize signatures released between September 8, 2022, and February 16, 2023. Users should refer to the F5 Security Advisory for detailed information regarding the affected classification signature files and ensure they are not using software versions that have reached End of Technical Support (EoTS).

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References