PT-2021-15374

CVE-2021-23051

·

Published

2021-09-14

·

Updated

2021-09-27

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 15.1.0.4 through 15.1.3
Description The issue occurs when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) driver is used with BIG-IP on Amazon Web Services (AWS) systems. Undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate due to an incomplete fix for a previously known issue.
Recommendations For versions 15.1.0.4 through 15.1.3, consider disabling the DPDK/ENA driver as a temporary workaround until a patch is available. Restrict access to the TMM to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾