F5 BIG-IP TMM Denial-of-Service Vulnerability in AWS Virtual Editions

A denial-of-service vulnerability has been identified in F5 BIG-IP Virtual Edition (VE) instances running versions 15.0.0-15.0.1.1 and 14.1.0-14.1.2.2. When these instances process specially crafted traffic with the default 'xnet' driver, they may experience a Traffic Management Microkernel (TMM) restart. This issue does not affect BIG-IP VEs in other virtual environments or hardware appliances.

Impact

Exploitation of this vulnerability can lead to a TMM process restart, causing a denial-of-service condition on the affected BIG-IP VE system.

Remediation

Users can upgrade to BIG-IP versions 15.1.0 or 14.1.2.3 to address this vulnerability. For guidance on managing BIG-IP product hotfixes, refer to the F5 article K13123.