mickmick.net

F5 Products Multiple Vulnerabilities

Release Date: 19 Aug 2024

RISK: Medium Risk

TYPE: Operating Systems - Networks OS

Multiple vulnerabilities were identified in F5 Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition and sensitive information disclosure on the targeted system.

---

Impact

• Denial of Service
• Information Disclosure

---

System / Technologies affected

BIG-IP (all modules)

• 15.1.0 - 15.1.10
• 16.1.0 - 16.1.4
• 17.1.0

 

BIG-IP Next SPK

• 1.7.0 - 1.8.2

 

BIG-IP Next CNF

• 1.1.0 - 1.1.1

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://my.f5.com/manage/s/article/K05710614
• https://my.f5.com/manage/s/article/K000138833
• https://my.f5.com/manage/s/article/K000138477
• https://my.f5.com/manage/s/article/K10438187

---

Vulnerability Identifier

• CVE-2024-39778
• CVE-2024-41164
• CVE-2024-41723
• CVE-2024-41727

---

Source

• F5

---

Related Link

• https://my.f5.com/manage/s/article/K05710614
• https://my.f5.com/manage/s/article/K000138833
• https://my.f5.com/manage/s/article/K000138477
• https://my.f5.com/manage/s/article/K10438187