PT-2023-19697 · F5 · Big-Ip

CVE-2023-24594 · Publicado 2023-05-03 · Atualizado 2023-10-05

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions BIG-IP versions prior to 17.0.0

Description When an SSL profile is configured on a Virtual Server, undisclosed traffic can cause an increase in CPU or SSL accelerator resource utilization.

Recommendations For versions prior to 17.0.0, update to version 17.0.0 or later to resolve the issue.

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2023-24594

Produtos afetados

Big-Ip

Referências · 6

• https://t.me/cvenotify/59037 · Publicação no Telegram
• https://t.me/cvenotify/49734 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-24594 · Nota de Segurança
• https://my.f5.com/manage/s/article/K000133132 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-24594 · Aviso do Fabricante
• https://t.me/cvenotify/50163 · Publicação no Telegram