F5 BIG-IP Traffic Management Microkernel Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in F5 BIG-IP systems when a classification profile is applied to a UDP virtual server. Under these conditions, certain undisclosed requests can lead to the termination of the Traffic Management Microkernel (TMM) process. This disruption causes a temporary outage as TMM restarts, allowing remote, unauthenticated attackers to interfere with active traffic. The issue is confined to the data plane, with no impact on the control plane.

Impact

Exploitation of this vulnerability disrupts traffic by causing the TMM process to crash and restart, creating a temporary denial-of-service condition on the BIG-IP system.

Remediation

F5 recommends removing the classification profile from UDP virtual servers until a fixed version is installed. For systems with high availability (HA) clustering, specific actions can be configured in the HA table to manage the impact of this vulnerability.