BIG-IP PEM Classification Profile Vulnerability

CVE-2024-23982

Summary

A vulnerability in F5 BIG-IP systems occurs when a PEM classification profile is active on a UDP virtual server. In this scenario, specific undisclosed requests can lead to the termination of the Traffic Management Microkernel (TMM). This issue particularly impacts classification engines that utilize signatures released between September 8, 2022, and February 16, 2023. Users should refer to the F5 Security Advisory for detailed information regarding the affected classification signature files and ensure they are not using software versions that have reached End of Technical Support (EoTS).

References