f5 big-ip next cloud-native network functions, f5 big-ip next for kubernetes, f5 big-ip next service proxy for kubernetes
CVSS 7.5 · High EPSS 0,57%
Kerentanan Allocation of Resources Without Limits or Throttling pada f5 big-ip next cloud-native network functions, f5 big-ip next for kubernetes +1 lainnya. Skor CVSS 3.1 7.5 (High) menurut f5.com.
When an HTTP/2 profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Impact: System performance can degrade until the TMM process is either forced to restart or is manually restarted. This vulnerability allows a remote, unauthenticated attacker to cause a degradation of service that can lead to a denial-of-service (DoS) on the BIG-IP system. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| f5 | big-ip next cloud-native network functions | Versi 1.1.0 hingga sebelum 1.4.3 |
| f5 | big-ip next cloud-native network functions | Versi 2.0.0 hingga sebelum 2.2.3 |
| f5 | big-ip next cloud-native network functions | Versi 2.3.0 |
| f5 | big-ip next for kubernetes | Versi 2.0.0 hingga sebelum 2.2.3 |
| f5 | big-ip next for kubernetes | Versi 2.3.0 |
| f5 | big-ip next service proxy for kubernetes | Versi 1.7.0 hingga sebelum 1.7.18 |
| f5 | big-ip next service proxy for kubernetes | Versi 1.8.0 hingga 1.9.2 |
| f5 | big-ip next service proxy for kubernetes | Versi 2.0.0 hingga 2.0.3 |