CVE-2024-23308 BIG-IP Advanced WAF and ASM vulnerability

High 7.5 Published 14 Feb 2024 Updated 1 Aug 2024

Attackers can cause a denial of service by sending specific requests to BIG-IP WAF/ASM policies configured with specific Request Body Handling options.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2024-23308?

CVE-2024-23308 is a high-severity vulnerability in F5 Big-Ip Advanced Web Application Firewall, published on 14 Feb 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

When a BIG-IP Advanced WAF or BIG-IP ASM policy with a Request Body Handling option is attached to a virtual server, undisclosed requests can cause the BD process to terminate. The condition results from setting the Request Body Handling option in the Header-Based Content Profile for an Allowed URL with "Apply value and content signatures and detect threat campaigns." Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Weakness: CWE-476

Which versions are affected by CVE-2024-23308?

It affects 2 products.

Products include F5 Big-Ip Advanced Web Application Firewall, F5 Big-Ip Application Security Manager.

How do I fix CVE-2024-23308?

No fix has been published for CVE-2024-23308 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-23308 being exploited?

There is no known exploitation of CVE-2024-23308 in the wild and no public exploit code.

All F5 Big-Ip Advanced Web Application Firewall vulnerabilities

Sources

Also known as GHSA-6x7g-3w67-hj7p.