Vulnerabilities > CVE-2024-41164 - NULL Pointer Dereference vulnerability in F5 products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

CWE-476

NVD

Published: 2024-08-14

Updated: 2024-08-19

Summary

When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions beyond the attackers control can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Vulnerable Configurations

Part	Description	Count
Application	F5 F5 BIG IP Access Policy Manager 17.1.0 F5 BIG IP Access Policy Manager 16.1.0 F5 BIG IP Access Policy Manager 16.1.1 F5 BIG IP Access Policy Manager 16.1.2 F5 BIG IP Access Policy Manager 16.1.2.2 F5 BIG IP Access Policy Manager 16.1.3 F5 BIG IP Access Policy Manager 16.1.3.1 F5 BIG IP Access Policy Manager 16.1.3.3 F5 BIG IP Access Policy Manager 16.1.3.4 F5 BIG IP Access Policy Manager 16.1.3.5 F5 BIG IP Access Policy Manager 16.1.4 F5 BIG IP Access Policy Manager 16.1.4.1 F5 BIG IP Access Policy Manager 15.1.0 F5 BIG IP Access Policy Manager 15.1.0.1 F5 BIG IP Access Policy Manager 15.1.0.2 F5 BIG IP Access Policy Manager 15.1.0.3 F5 BIG IP Access Policy Manager 15.1.0.4 F5 BIG IP Access Policy Manager 15.1.0.5 F5 BIG IP Access Policy Manager 15.1.1 F5 BIG IP Advanced Firewall Manager 17.1.0 F5 BIG IP Advanced Firewall Manager 16.1.0 F5 BIG IP Advanced Firewall Manager 16.1.1 F5 BIG IP Advanced Firewall Manager 16.1.2 F5 BIG IP Advanced Firewall Manager 16.1.2.2 F5 BIG IP Advanced Firewall Manager 16.1.3 F5 BIG IP Advanced Firewall Manager 16.1.3.1 F5 BIG IP Advanced Firewall Manager 16.1.3.2 F5 BIG IP Advanced Firewall Manager 16.1.3.3 F5 BIG IP Advanced Firewall Manager 16.1.3.4 F5 BIG IP Advanced Firewall Manager 16.1.3.5 F5 BIG IP Advanced Firewall Manager 16.1.4 F5 BIG IP Advanced Firewall Manager 16.1.4.1 F5 BIG IP Advanced Firewall Manager 15.1.0 F5 BIG IP Advanced Firewall Manager 15.1.0.1 F5 BIG IP Advanced Firewall Manager 15.1.0.2 F5 BIG IP Advanced Firewall Manager 15.1.0.3 F5 BIG IP Advanced Firewall Manager 15.1.0.4 F5 BIG IP Advanced Firewall Manager 15.1.0.5 F5 BIG IP Advanced WEB Application Firewall 17.1.0 F5 BIG IP Advanced WEB Application Firewall 16.1.0 F5 BIG IP Advanced WEB Application Firewall 16.1.1 F5 BIG IP Advanced WEB Application Firewall 16.1.2 F5 BIG IP Advanced WEB Application Firewall 16.1.3 F5 BIG IP Advanced WEB Application Firewall 16.1.3.1 F5 BIG IP Advanced WEB Application Firewall 16.1.3.3 F5 BIG IP Advanced WEB Application Firewall 16.1.3.4 F5 BIG IP Advanced WEB Application Firewall 16.1.3.5 F5 BIG IP Advanced WEB Application Firewall 16.1.4 F5 BIG IP Advanced WEB Application Firewall 16.1.4.1 F5 BIG IP Advanced WEB Application Firewall 15.1.0 F5 BIG IP Advanced WEB Application Firewall 15.1.0.2 F5 BIG IP Advanced WEB Application Firewall 15.1.0.4 F5 BIG IP Advanced WEB Application Firewall 15.1.0.5 F5 BIG IP Analytics 17.1.0 F5 BIG IP Analytics 16.1.0 F5 BIG IP Analytics 16.1.1 F5 BIG IP Analytics 16.1.2 F5 BIG IP Analytics 16.1.2.2 F5 BIG IP Analytics 16.1.3 F5 BIG IP Analytics 16.1.3.1 F5 BIG IP Analytics 16.1.3.3 F5 BIG IP Analytics 16.1.3.4 F5 BIG IP Analytics 16.1.3.5 F5 BIG IP Analytics 16.1.4 F5 BIG IP Analytics 16.1.4.1 F5 BIG IP Analytics 15.1.0 F5 BIG IP Analytics 15.1.0.1 F5 BIG IP Analytics 15.1.0.2 F5 BIG IP Analytics 15.1.0.3 F5 BIG IP Analytics 15.1.0.4 F5 BIG IP Analytics 15.1.0.5 F5 BIG IP Analytics 15.1.1 F5 BIG IP Application Acceleration Manager 17.1.0 F5 BIG IP Application Acceleration Manager 16.1.0 F5 BIG IP Application Acceleration Manager 16.1.1 F5 BIG IP Application Acceleration Manager 16.1.2 F5 BIG IP Application Acceleration Manager 16.1.2.2 F5 BIG IP Application Acceleration Manager 16.1.3 F5 BIG IP Application Acceleration Manager 16.1.3.1 F5 BIG IP Application Acceleration Manager 16.1.3.3 F5 BIG IP Application Acceleration Manager 16.1.3.4 F5 BIG IP Application Acceleration Manager 16.1.3.5 F5 BIG IP Application Acceleration Manager 16.1.4 F5 BIG IP Application Acceleration Manager 16.1.4.1 F5 BIG IP Application Acceleration Manager 15.1.0 F5 BIG IP Application Acceleration Manager 15.1.0.1 F5 BIG IP Application Acceleration Manager 15.1.0.2 F5 BIG IP Application Acceleration Manager 15.1.0.3 F5 BIG IP Application Acceleration Manager 15.1.0.4 F5 BIG IP Application Acceleration Manager 15.1.0.5 F5 BIG IP Application Security Manager 17.1.0 F5 BIG IP Application Security Manager 16.1.0 F5 BIG IP Application Security Manager 16.1.1 F5 BIG IP Application Security Manager 16.1.2 F5 BIG IP Application Security Manager 16.1.2.2 F5 BIG IP Application Security Manager 16.1.3 F5 BIG IP Application Security Manager 16.1.3.1 F5 BIG IP Application Security Manager 16.1.3.3 F5 BIG IP Application Security Manager 16.1.3.4 F5 BIG IP Application Security Manager 16.1.3.5 F5 BIG IP Application Security Manager 16.1.4 F5 BIG IP Application Security Manager 16.1.4.1 F5 BIG IP Application Security Manager 15.1.0 F5 BIG IP Application Security Manager 15.1.0.1 F5 BIG IP Application Security Manager 15.1.0.2 F5 BIG IP Application Security Manager 15.1.0.3 F5 BIG IP Application Security Manager 15.1.0.4 F5 BIG IP Application Security Manager 15.1.0.5 F5 BIG IP Application Security Manager 15.1.1 F5 BIG IP Application Visibility AND Reporting 17.1.0 F5 BIG IP Application Visibility AND Reporting 16.1.0 F5 BIG IP Application Visibility AND Reporting 16.1.2 F5 BIG IP Application Visibility AND Reporting 16.1.3 F5 BIG IP Application Visibility AND Reporting 16.1.3.1 F5 BIG IP Application Visibility AND Reporting 16.1.3.4 F5 BIG IP Application Visibility AND Reporting 16.1.3.5 F5 BIG IP Application Visibility AND Reporting 16.1.4 F5 BIG IP Application Visibility AND Reporting 16.1.4.1 F5 BIG IP Application Visibility AND Reporting 15.1.0 F5 BIG IP Application Visibility AND Reporting 15.1.1 F5 BIG IP Carrier Grade NAT 17.1.0 F5 BIG IP Carrier Grade NAT 16.1.0 F5 BIG IP Carrier Grade NAT 16.1.2 F5 BIG IP Carrier Grade NAT 16.1.2.2 F5 BIG IP Carrier Grade NAT 16.1.3 F5 BIG IP Carrier Grade NAT 16.1.3.1 F5 BIG IP Carrier Grade NAT 16.1.3.4 F5 BIG IP Carrier Grade NAT 16.1.3.5 F5 BIG IP Carrier Grade NAT 16.1.4 F5 BIG IP Carrier Grade NAT 16.1.4.1 F5 BIG IP Carrier Grade NAT 15.1.0 F5 BIG IP Carrier Grade NAT 15.1.1 F5 BIG IP Ddos Hybrid Defender 17.1.0 F5 BIG IP Ddos Hybrid Defender 16.1.0 F5 BIG IP Ddos Hybrid Defender 16.1.2 F5 BIG IP Ddos Hybrid Defender 16.1.2.2 F5 BIG IP Ddos Hybrid Defender 16.1.3 F5 BIG IP Ddos Hybrid Defender 16.1.3.1 F5 BIG IP Ddos Hybrid Defender 16.1.3.3 F5 BIG IP Ddos Hybrid Defender 16.1.3.4 F5 BIG IP Ddos Hybrid Defender 16.1.3.5 F5 BIG IP Ddos Hybrid Defender 16.1.4 F5 BIG IP Ddos Hybrid Defender 16.1.4.1 F5 BIG IP Ddos Hybrid Defender 15.1.0 F5 BIG IP Ddos Hybrid Defender 15.1.0.2 F5 BIG IP Ddos Hybrid Defender 15.1.0.4 F5 BIG IP Ddos Hybrid Defender 15.1.0.5 F5 BIG IP Ddos Hybrid Defender 15.1.1 F5 BIG IP Domain Name System 17.1.0 F5 BIG IP Domain Name System 16.1.0 F5 BIG IP Domain Name System 16.1.1 F5 BIG IP Domain Name System 16.1.2 F5 BIG IP Domain Name System 16.1.2.2 F5 BIG IP Domain Name System 16.1.3 F5 BIG IP Domain Name System 16.1.3.1 F5 BIG IP Domain Name System 16.1.3.3 F5 BIG IP Domain Name System 16.1.3.4 F5 BIG IP Domain Name System 16.1.3.5 F5 BIG IP Domain Name System 16.1.4 F5 BIG IP Domain Name System 16.1.4.1 F5 BIG IP Domain Name System 15.1.0 F5 BIG IP Domain Name System 15.1.0.1 F5 BIG IP Domain Name System 15.1.0.2 F5 BIG IP Domain Name System 15.1.0.3 F5 BIG IP Domain Name System 15.1.0.4 F5 BIG IP Domain Name System 15.1.0.5 F5 BIG IP Domain Name System 15.1.1 F5 BIG IP Edge Gateway 17.1.0 F5 BIG IP Edge Gateway 16.1.0 F5 BIG IP Edge Gateway 16.1.2 F5 BIG IP Edge Gateway 16.1.3 F5 BIG IP Edge Gateway 16.1.3.1 F5 BIG IP Edge Gateway 16.1.3.4 F5 BIG IP Edge Gateway 16.1.3.5 F5 BIG IP Edge Gateway 16.1.4 F5 BIG IP Edge Gateway 16.1.4.1 F5 BIG IP Edge Gateway 15.1.0 F5 BIG IP Edge Gateway 15.1.0.1 F5 BIG IP Edge Gateway 15.1.0.2 F5 BIG IP Edge Gateway 15.1.0.5 F5 BIG IP Edge Gateway 15.1.1 F5 BIG IP Fraud Protection Service 17.1.0 F5 BIG IP Fraud Protection Service 16.1.0 F5 BIG IP Fraud Protection Service 16.1.1 F5 BIG IP Fraud Protection Service 16.1.2 F5 BIG IP Fraud Protection Service 16.1.2.2 F5 BIG IP Fraud Protection Service 16.1.3 F5 BIG IP Fraud Protection Service 16.1.3.1 F5 BIG IP Fraud Protection Service 16.1.3.3 F5 BIG IP Fraud Protection Service 16.1.3.4 F5 BIG IP Fraud Protection Service 16.1.3.5 F5 BIG IP Fraud Protection Service 16.1.4 F5 BIG IP Fraud Protection Service 16.1.4.1 F5 BIG IP Fraud Protection Service 15.1.0 F5 BIG IP Fraud Protection Service 15.1.0.1 F5 BIG IP Fraud Protection Service 15.1.0.2 F5 BIG IP Fraud Protection Service 15.1.0.3 F5 BIG IP Fraud Protection Service 15.1.0.4 F5 BIG IP Fraud Protection Service 15.1.0.5 F5 BIG IP Global Traffic Manager 17.1.0 F5 BIG IP Global Traffic Manager 16.1.0 F5 BIG IP Global Traffic Manager 16.1.1 F5 BIG IP Global Traffic Manager 16.1.2 F5 BIG IP Global Traffic Manager 16.1.3 F5 BIG IP Global Traffic Manager 16.1.3.1 F5 BIG IP Global Traffic Manager 16.1.3.4 F5 BIG IP Global Traffic Manager 16.1.3.5 F5 BIG IP Global Traffic Manager 16.1.4 F5 BIG IP Global Traffic Manager 16.1.4.1 F5 BIG IP Global Traffic Manager 15.1.0 F5 BIG IP Global Traffic Manager 15.1.0.1 F5 BIG IP Global Traffic Manager 15.1.0.2 F5 BIG IP Global Traffic Manager 15.1.0.3 F5 BIG IP Global Traffic Manager 15.1.0.4 F5 BIG IP Global Traffic Manager 15.1.0.5 F5 BIG IP Global Traffic Manager 15.1.1 F5 BIG IP Link Controller 17.1.0 F5 BIG IP Link Controller 16.1.0 F5 BIG IP Link Controller 16.1.1 F5 BIG IP Link Controller 16.1.2 F5 BIG IP Link Controller 16.1.2.2 F5 BIG IP Link Controller 16.1.3 F5 BIG IP Link Controller 16.1.3.1 F5 BIG IP Link Controller 16.1.3.3 F5 BIG IP Link Controller 16.1.3.4 F5 BIG IP Link Controller 16.1.3.5 F5 BIG IP Link Controller 16.1.4 F5 BIG IP Link Controller 16.1.4.1 F5 BIG IP Link Controller 15.1.0 F5 BIG IP Link Controller 15.1.0.1 F5 BIG IP Link Controller 15.1.0.2 F5 BIG IP Link Controller 15.1.0.3 F5 BIG IP Link Controller 15.1.0.4 F5 BIG IP Link Controller 15.1.0.5 F5 BIG IP Local Traffic Manager 17.1.0 F5 BIG IP Local Traffic Manager 16.1.0 F5 BIG IP Local Traffic Manager 16.1.1 F5 BIG IP Local Traffic Manager 16.1.2 F5 BIG IP Local Traffic Manager 16.1.2.2 F5 BIG IP Local Traffic Manager 16.1.3 F5 BIG IP Local Traffic Manager 16.1.3.1 F5 BIG IP Local Traffic Manager 16.1.3.3 F5 BIG IP Local Traffic Manager 16.1.3.4 F5 BIG IP Local Traffic Manager 16.1.3.5 F5 BIG IP Local Traffic Manager 16.1.4 F5 BIG IP Local Traffic Manager 16.1.4.1 F5 BIG IP Local Traffic Manager 15.1.0 F5 BIG IP Local Traffic Manager 15.1.0.1 F5 BIG IP Local Traffic Manager 15.1.0.2 F5 BIG IP Local Traffic Manager 15.1.0.3 F5 BIG IP Local Traffic Manager 15.1.0.4 F5 BIG IP Local Traffic Manager 15.1.0.5 F5 BIG IP Policy Enforcement Manager 17.1.0 F5 BIG IP Policy Enforcement Manager 16.1.0 F5 BIG IP Policy Enforcement Manager 16.1.1 F5 BIG IP Policy Enforcement Manager 16.1.2 F5 BIG IP Policy Enforcement Manager 16.1.2.2 F5 BIG IP Policy Enforcement Manager 16.1.3 F5 BIG IP Policy Enforcement Manager 16.1.3.1 F5 BIG IP Policy Enforcement Manager 16.1.3.3 F5 BIG IP Policy Enforcement Manager 16.1.3.4 F5 BIG IP Policy Enforcement Manager 16.1.3.5 F5 BIG IP Policy Enforcement Manager 16.1.4 F5 BIG IP Policy Enforcement Manager 16.1.4.1 F5 BIG IP Policy Enforcement Manager 15.1.0 F5 BIG IP Policy Enforcement Manager 15.1.0.1 F5 BIG IP Policy Enforcement Manager 15.1.0.2 F5 BIG IP Policy Enforcement Manager 15.1.0.3 F5 BIG IP Policy Enforcement Manager 15.1.0.4 F5 BIG IP Policy Enforcement Manager 15.1.0.5 F5 BIG IP SSL Orchestrator 17.1.0 F5 BIG IP SSL Orchestrator 16.1.0 F5 BIG IP SSL Orchestrator 16.1.2 F5 BIG IP SSL Orchestrator 16.1.2.2 F5 BIG IP SSL Orchestrator 16.1.3 F5 BIG IP SSL Orchestrator 16.1.3.1 F5 BIG IP SSL Orchestrator 16.1.3.3 F5 BIG IP SSL Orchestrator 16.1.3.4 F5 BIG IP SSL Orchestrator 16.1.3.5 F5 BIG IP SSL Orchestrator 16.1.4 F5 BIG IP SSL Orchestrator 16.1.4.1 F5 BIG IP SSL Orchestrator 15.1.0 F5 BIG IP SSL Orchestrator 15.1.0.4 F5 BIG IP Webaccelerator 17.1.0 F5 BIG IP Webaccelerator 16.1.0 F5 BIG IP Webaccelerator 16.1.2 F5 BIG IP Webaccelerator 16.1.3 F5 BIG IP Webaccelerator 16.1.3.1 F5 BIG IP Webaccelerator 16.1.3.4 F5 BIG IP Webaccelerator 16.1.3.5 F5 BIG IP Webaccelerator 16.1.4 F5 BIG IP Webaccelerator 16.1.4.1 F5 BIG IP Webaccelerator 15.1.0 F5 BIG IP Webaccelerator 15.1.0.1 F5 BIG IP Webaccelerator 15.1.0.2 F5 BIG IP Webaccelerator 15.1.0.5 F5 BIG IP Webaccelerator 15.1.1 F5 BIG IP Websafe 17.1.0 F5 BIG IP Websafe 16.1.0 F5 BIG IP Websafe 16.1.2 F5 BIG IP Websafe 16.1.3 F5 BIG IP Websafe 16.1.3.1 F5 BIG IP Websafe 16.1.3.4 F5 BIG IP Websafe 16.1.3.5 F5 BIG IP Websafe 16.1.4 F5 BIG IP Websafe 16.1.4.1 F5 BIG IP Websafe 15.1.0 F5 BIG IP Automation Toolchain 17.1.0 F5 BIG IP Automation Toolchain 16.1.0 F5 BIG IP Automation Toolchain 16.1.4 F5 BIG IP Automation Toolchain 15.1.0 F5 BIG IP Container Ingress Services 17.1.0 F5 BIG IP Container Ingress Services 16.1.0 F5 BIG IP Container Ingress Services 16.1.4 F5 BIG IP Container Ingress Services 15.1.0 F5 BIG IP Next Service Proxy FOR Kubernetes 1.8.2 F5 BIG IP Next Cloud Native Network Functions 1.1.0 F5 BIG IP Next Cloud Native Network Functions 1.1.1	318

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

References

https://my.f5.com/manage/s/article/K000138477