Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-24594 EUVD-2023-28609GHSA-7c8w-gjf8-h77g

BIG-IP TMM SSL vulnerability

Published May 3, 2023 · Updated Jan 29, 2025 · Assigned by f5

Description

When an SSL profile is configured on a Virtual Server, undisclosed traffic can cause an increase in CPU or SSL accelerator resource utilization.  

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 BIG-IP 16.1.2 – < 16.1.2.1, 15.1.4.1 – < 15.1.5, 14.1.5 16.1.2.1
F5 BIG-IP SPK 1.5.0 – < 1.6.0 1.6.0

References