mickmick.net

F5 Products Denial of Service Vulnerability

Release Date: 17 Dec 2024

RISK: High Risk

TYPE: Operating Systems - Networks OS

A vulnerability was identified in F5 Products. A remote attacker could exploit this vulnerability to trigger denial of service condition on the targeted system.

 

Note:

No patch is currently available for CVE-2024-7592 of the affected products. Hence, the risk level is rated from Medium Risk to High Risk.

---

Impact

• Denial of Service

---

System / Technologies affected

BIG-IP Next SPK

 

• 1.7.0 - 1.9.2

 

BIG-IP Next CNF

 

• 1.1.0 - 1.3.3

 

---

Solutions

Please visit the vendor web-site for more details.

 

Apply workarounds issued by the vendor:

• https://my.f5.com/manage/s/article/K000148969

 

Workaround:

Mitigate the vulnerability of attacks by following workaround:

 

1. Refrain from using the Python http.cookies module in custom scripts.

---

Vulnerability Identifier

• CVE-2024-7592

---

Source

• F5

---

Related Link

https://my.f5.com/manage/s/article/K000148969