F5 BIG-IP Advanced WAF and ASM Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in F5 BIG-IP Advanced WAF and BIG-IP ASM. When a security policy is applied to a virtual server and is configured with a JSON content profile that contains a malformed JSON schema, certain undisclosed requests can lead to the termination of the 'bd' process. This disruption causes a temporary traffic interruption while the process restarts.

Impact

Exploitation of this vulnerability causes the 'bd' process to terminate, disrupting traffic until the process is restarted, thereby causing a denial-of-service condition on the BIG-IP system.

Remediation

Users can upgrade to BIG-IP versions 17.5.1.3, 17.1.3, 16.1.6.1, or 15.1.10.8 to address this vulnerability. For more information about F5 hotfixes and point releases, refer to the F5 BIG-IP hotfix and point release matrix.