
Cloud Vulnerability DB
A community-led vulnerabilities database
On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when an SCTP profile with multiple paths is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate (MITRE CVE).
The vulnerability affects BIG-IP systems with SCTP (Stream Control Transmission Protocol) profiles configured with multiple paths on a virtual server. When specific undisclosed requests are made to the affected system, it can result in the termination of the Traffic Management Microkernel (TMM) (CERT-FR).
The primary impact of this vulnerability is a denial of service condition through the termination of the Traffic Management Microkernel (TMM), which is a critical component of the BIG-IP system (CERT-FR).
The vulnerability can be addressed by upgrading to the following versions: BIG-IP 16.0.1.2 or later, 15.1.3.1 or later, 14.1.4.3 or later, or 13.1.4.1 or later. Systems running version 12.1.x should be upgraded to a supported version as all versions of 12.1.x are affected (MITRE CVE).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."