Lucene search

K
f5F5F5:K20145107
HistoryMay 03, 2023 - 12:00 a.m.

K20145107 : BIG-IP UDP profile vulnerability CVE-2023-29163

2023-05-0300:00:00
my.f5.com
3
big-ip
udp
profile
immediate
idle timeout
vulnerability
cve-2023-29163
dos

AI Score

7

Confidence

High

EPSS

0.001

Percentile

33.9%

Security Advisory Description

When a UDP profile with Idle Timeout set to Immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. (CVE-2023-29163)

Impact

Traffic is disrupted while the TMM process restarts. This vulnerability allows a remote unauthenticated attacker to cause a denial-of-service (DoS) on the BIG-IP system. There is no control plane exposure; this is a data plane issue only.

The default value for the Idle Timeout setting is60.

AI Score

7

Confidence

High

EPSS

0.001

Percentile

33.9%