Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-05960
HistoryFeb 01, 2023 - 12:00 a.m.

F5 BIG-IP HTTP/2 profile denial of service vulnerability

2023-02-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
f5 big-ip
http/2 profile
denial of service
vulnerability
memory resource utilization
remote attacker
degradation of service

0.001 Low

EPSS

Percentile

33.7%

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP HTTP/2 profile, when enabling the client HTTP/2 profile and HTTP MRF router option for the virtual server, an undisclosed request could result in increased memory resource utilization, which can be exploited by an unauthenticated remote attacker to cause a degradation of service, resulting in a denial of service on the BIG-IP system.

0.001 Low

EPSS

Percentile

33.7%

Related for CNVD-2023-05960