PT-2023-6400 · F5 · Big-Ip

CVE-2023-40534 · Publicado 2023-10-10 · Atualizado 2023-10-19

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions BIG-IP versions prior to the fixed version

Description The issue is related to errors in memory release, which can be exploited by a remote attacker to cause a denial of service. When a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, and an iRule using the HTTP REQUEST event or Local Traffic Policy are associated with the virtual server, undisclosed requests can cause TMM to terminate.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Enumeração de Fraquezas

CWE-401

Identificadores relacionados

BDU:2023-07114

CVE-2023-40534

Produtos afetados

Big-Ip

Referências · 6

• https://bdu.fstec.ru/vul/2023-07114 · Nota de Segurança
• https://my.f5.com/manage/s/article/K000133467 · Aviso do Fabricante
• https://t.me/cibsecurity/71924 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-40534 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-40534 · Nota de Segurança
• https://vuldb.com/ru/?id.241672 · Nota