F5 BIG-IP Advanced WAF and ASM Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in F5 BIG-IP Advanced WAF and ASM. When a security policy is active on a virtual server, certain undisclosed requests can lead to the termination of the 'bd' process. This disruption causes a temporary outage as the process restarts, allowing remote, unauthenticated attackers to interfere with traffic on the BIG-IP system.

Impact

Exploitation of this vulnerability disrupts traffic by causing the 'bd' process to terminate and restart, leading to a temporary denial-of-service condition on the BIG-IP system.

Remediation

Users can upgrade to BIG-IP versions 17.5.1 or 17.1.3 to address this vulnerability. For BIG-IP 15.x users, version 15.1.10.8 is available. F5 also recommends configuring BIG-IP systems with high availability to mitigate the impact of this vulnerability.