CVE-2024-23979
HIGHDescription
When SSL Client Certificate LDAP or Certificate Revocation List Distribution Point (CRLDP) authentication profile is configured on a virtual server, undisclosed requests can cause an increase in CPU resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Is your site exposed to CVE-2024-23979?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| f5 | big-ip_access_policy_manager |
| f5 | big-ip_access_policy_manager |
| f5 | big-ip_access_policy_manager |
| f5 | big-iq_centralized_management |
| f5 | big-ip_advanced_firewall_manager |
| f5 | big-ip_advanced_firewall_manager |
| f5 | big-ip_advanced_firewall_manager |
| f5 | big-ip_analytics |
| f5 | big-ip_analytics |
| f5 | big-ip_analytics |
| f5 | big-ip_application_acceleration_manager |
| f5 | big-ip_application_acceleration_manager |
| f5 | big-ip_application_acceleration_manager |
| f5 | big-ip_application_security_manager |
| f5 | big-ip_application_security_manager |
| f5 | big-ip_application_security_manager |
| f5 | big-ip_domain_name_system |
| f5 | big-ip_domain_name_system |
| f5 | big-ip_domain_name_system |
| f5 | big-ip_fraud_protection_service |
| f5 | big-ip_fraud_protection_service |
| f5 | big-ip_fraud_protection_service |
| f5 | big-ip_global_traffic_manager |
| f5 | big-ip_global_traffic_manager |
| f5 | big-ip_global_traffic_manager |
| f5 | big-ip_link_controller |
| f5 | big-ip_link_controller |
| f5 | big-ip_link_controller |
| f5 | big-ip_local_traffic_manager |
| f5 | big-ip_local_traffic_manager |
| f5 | big-ip_local_traffic_manager |
| f5 | big-ip_policy_enforcement_manager |
| f5 | big-ip_policy_enforcement_manager |
| f5 | big-ip_policy_enforcement_manager |
References
Frequently Asked Questions
What is CVE-2024-23979? +
How severe is CVE-2024-23979? +
What products are affected by CVE-2024-23979? +
How do I check if I'm vulnerable to CVE-2024-23979? +
Related Vulnerabilities
mcp-framework is a framework for building Model Context Protocol (MCP) servers. In versions 0.2.21 and below, the readRequestBody() function in …
spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser …
Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated remote denial of service via memory exhaustion. …
Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated remote denial of service via memory exhaustion …
Allocation of Resources Without Limits or Throttling vulnerability in elixir-plug plug_cowboy allows unauthenticated remote denial of service via atom table …
A denial-of-service security issue exists in 1734 POINT I/O™ module. The security issue stems from improper handling of crafted CIP …