CVE-2024-23979: 
F5 BIG-IP Advanced Firewall Manager vulnerability analysis and mitigation

A vulnerability (CVE-2024-23979) has been identified in F5's BIG-IP systems where when SSL Client Certificate LDAP or Certificate Revocation List Distribution Point (CRLDP) authentication profile is configured on a virtual server, undisclosed requests can cause an increase in CPU resource utilization. The vulnerability affects multiple versions of BIG-IP products including versions 15.1.0-15.1.9, 16.1.0-16.1.4, and 17.1.0 (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. It is classified under CWE-770 (Allocation of Resources Without Limits or Throttling), indicating an issue with resource management (NVD).

When exploited, this vulnerability can lead to increased CPU resource utilization on affected BIG-IP systems, potentially resulting in a denial of service condition. The impact is specifically tied to configurations using SSL Client Certificate LDAP or CRLDP authentication profiles (ASEC).

F5 has released security updates to address this vulnerability. Users are advised to upgrade to the following versions: BIG-IP 15.1.10, 16.1.4, or 17.1.1. Note that software versions which have reached End of Technical Support (EoTS) are not evaluated (ASEC).