F5 BIG-IP Multipath TCP Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in F5 BIG-IP systems when a TCP profile with Multipath TCP (MPTCP) enabled is configured on a virtual server. Under certain undisclosed traffic conditions, which are beyond the attacker's control, the Traffic Management Microkernel (TMM) may terminate, disrupting service. This issue affects BIG-IP versions 15.1.0 through 15.1.10, 16.1.0 through 16.1.5, and 17.1.0 through 17.1.2.

Impact

Exploitation of this vulnerability causes the TMM process to terminate, disrupting traffic until the process restarts, thereby creating a denial-of-service condition on the BIG-IP system.

Remediation

Users can upgrade to BIG-IP versions 15.1.10.8, 16.1.6, or 17.1.2.2, depending on their current version. For more information about managing BIG-IP product hotfixes, refer to the F5 article K13123.