K43470422 : BIG-IP MPTCP vulnerability CVE-2021-23003

Security Advisory Description

The Traffic Management Microkernel (TMM) process may produce a core file when undisclosed MPTCP traffic passes through a standard virtual server. (CVE-2021-23003)

Impact

A remote attacker may be able to cause the BIG-IP system to produce a core file, disrupting the flow of traffic and causing a failover to a standby system, if configured. Additionally, in rare circumstances, running the tmsh show conn command may trigger this vulnerability.