Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-05963
HistoryFeb 01, 2023 - 12:00 a.m.

F5 BIG-IP SSL OCSP Authentication Profile Denial of Service Vulnerability

2023-02-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
15
f5 big-ip
denial of service
ssl
ocsp
authentication
vulnerability
cpu resource
remote attacker
service degradation

0.001 Low

EPSS

Percentile

33.8%

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP SSL OCSP authentication profile, when a virtual server is configured with an OCSP authentication profile, an undisclosed request could lead to an increase in CPU resource utilization and an un authenticated remote attacker can exploit the vulnerability to cause service degradation, resulting in a denial of service on the BIG-IP system.

0.001 Low

EPSS

Percentile

33.8%

Related for CNVD-2023-05963