Skip to content
OpenAdvisories
High · 7.5 CVE-2023-23555 EUVD-2023-27655GHSA-9hrr-866c-p39r

BIG-IP Virtual Edition vulnerability

Published Feb 1, 2023 · Updated Mar 26, 2025 · Assigned by f5

Description

On BIG-IP Virtual Edition versions 15.1x beginning in 15.1.4 to before 15.1.8 and 14.1.x beginning in 14.1.5 to before 14.1.5.3, and BIG-IP SPK beginning in 1.5.0 to before 1.6.0, when FastL4 profile is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 BIG-IP 15.1.4 – < 15.1.8, 14.1.5 – < 14.1.5.3 15.1.8
F5 BIG-IP SPK 1.5.0 – < 1.6.0 1.6.0

Advisories 1

References