CVE Vulnerabilities

CVE-2024-39778

Published: Aug 14, 2024 | Modified: Aug 19, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

When a stateless virtual server is configured on BIG-IP system with a High-Speed Bridge (HSB), undisclosed requests can cause TMM to terminate.

  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected Software

NameVendorStart VersionEnd Version
Big-ip_access_policy_managerF515.1.0 (including)15.1.1 (including)
Big-ip_access_policy_managerF516.1.0 (including)16.1.5 (excluding)
Big-ip_access_policy_managerF517.1.0 (including)17.1.0 (including)
Big-ip_advanced_firewall_managerF515.1.0 (including)15.1.1 (including)
Big-ip_advanced_firewall_managerF516.1.0 (including)16.1.5 (excluding)
Big-ip_advanced_firewall_managerF517.1.0 (including)17.1.0 (including)
Big-ip_advanced_web_application_firewallF515.1.0 (including)15.1.1 (including)
Big-ip_advanced_web_application_firewallF516.1.0 (including)16.1.5 (excluding)
Big-ip_advanced_web_application_firewallF517.1.0 (including)17.1.0 (including)
Big-ip_analyticsF515.1.0 (including)15.1.1 (including)
Big-ip_analyticsF516.1.0 (including)16.1.5 (excluding)
Big-ip_analyticsF517.1.0 (including)17.1.0 (including)
Big-ip_application_acceleration_managerF515.1.0 (including)15.1.1 (including)
Big-ip_application_acceleration_managerF516.1.0 (including)16.1.5 (excluding)
Big-ip_application_acceleration_managerF517.1.0 (including)17.1.0 (including)
Big-ip_application_security_managerF515.1.0 (including)15.1.1 (including)
Big-ip_application_security_managerF516.1.0 (including)16.1.5 (excluding)
Big-ip_application_security_managerF517.1.0 (including)17.1.0 (including)
Big-ip_application_visibility_and_reportingF515.1.0 (including)15.1.1 (including)
Big-ip_application_visibility_and_reportingF516.1.0 (including)16.1.5 (excluding)
Big-ip_application_visibility_and_reportingF517.1.0 (including)17.1.0 (including)
Big-ip_automation_toolchainF515.1.0 (including)15.1.1 (including)
Big-ip_automation_toolchainF516.1.0 (including)16.1.5 (excluding)
Big-ip_automation_toolchainF517.1.0 (including)17.1.0 (including)
Big-ip_carrier-grade_natF515.1.0 (including)15.1.1 (including)
Big-ip_carrier-grade_natF516.1.0 (including)16.1.5 (excluding)
Big-ip_carrier-grade_natF517.1.0 (including)17.1.0 (including)
Big-ip_container_ingress_servicesF515.1.0 (including)15.1.1 (including)
Big-ip_container_ingress_servicesF516.1.0 (including)16.1.5 (excluding)
Big-ip_container_ingress_servicesF517.1.0 (including)17.1.0 (including)
Big-ip_ddos_hybrid_defenderF515.1.0 (including)15.1.1 (including)
Big-ip_ddos_hybrid_defenderF516.1.0 (including)16.1.5 (excluding)
Big-ip_ddos_hybrid_defenderF517.1.0 (including)17.1.0 (including)
Big-ip_domain_name_systemF515.1.0 (including)15.1.1 (including)
Big-ip_domain_name_systemF516.1.0 (including)16.1.5 (excluding)
Big-ip_domain_name_systemF517.1.0 (including)17.1.0 (including)
Big-ip_edge_gatewayF515.1.0 (including)15.1.1 (including)
Big-ip_edge_gatewayF516.1.0 (including)16.1.5 (excluding)
Big-ip_edge_gatewayF517.1.0 (including)17.1.0 (including)
Big-ip_fraud_protection_serviceF515.1.0 (including)15.1.1 (including)
Big-ip_fraud_protection_serviceF516.1.0 (including)16.1.5 (excluding)
Big-ip_fraud_protection_serviceF517.1.0 (including)17.1.0 (including)
Big-ip_global_traffic_managerF515.1.0 (including)15.1.1 (including)
Big-ip_global_traffic_managerF516.1.0 (including)16.1.5 (excluding)
Big-ip_global_traffic_managerF517.1.0 (including)17.1.0 (including)
Big-ip_link_controllerF515.1.0 (including)15.1.1 (including)
Big-ip_link_controllerF516.1.0 (including)16.1.5 (excluding)
Big-ip_link_controllerF517.1.0 (including)17.1.0 (including)
Big-ip_local_traffic_managerF515.1.0 (including)15.1.1 (including)
Big-ip_local_traffic_managerF516.1.0 (including)16.1.5 (excluding)
Big-ip_local_traffic_managerF517.1.0 (including)17.1.0 (including)
Big-ip_policy_enforcement_managerF515.1.0 (including)15.1.1 (including)
Big-ip_policy_enforcement_managerF516.1.0 (including)16.1.5 (excluding)
Big-ip_policy_enforcement_managerF517.1.0 (including)17.1.0 (including)
Big-ip_ssl_orchestratorF515.1.0 (including)15.1.1 (including)
Big-ip_ssl_orchestratorF516.1.0 (including)16.1.5 (excluding)
Big-ip_ssl_orchestratorF517.1.0 (including)17.1.0 (including)
Big-ip_webacceleratorF515.1.0 (including)15.1.1 (including)
Big-ip_webacceleratorF516.1.0 (including)16.1.5 (excluding)
Big-ip_webacceleratorF517.1.0 (including)17.1.0 (including)
Big-ip_websafeF515.1.0 (including)15.1.1 (including)
Big-ip_websafeF516.1.0 (including)16.1.5 (excluding)
Big-ip_websafeF517.1.0 (including)17.1.0 (including)

References