Description

Under certain conditions, a data leak may occur in the Traffic Management Microkernels (TMMs) of BIG-IP tenants running on VELOS and rSeries platforms. This leak occurs randomly and cannot be deliberately triggered. If it occurs, it may leak up to 64 bytes of non-contiguous randomized bytes. Under rare conditions, this may lead to a TMM restart, affecting availability.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

INFO

Published Date :

2024-05-08T15:01:29.122Z

Last Modified :

2026-02-03T00:38:44.961Z

Source :

f5
AFFECTED PRODUCTS

The following products are affected by CVE-2024-32761 vulnerability.

Vendors Products
F5
  • Big-ip
  • Big-ip Access Policy Manager
  • Big-ip Advanced Firewall Manager
  • Big-ip Advanced Web Application Firewall
  • Big-ip Analytics
  • Big-ip Application Acceleration Manager
  • Big-ip Application Security Manager
  • Big-ip Application Visibility And Reporting
  • Big-ip Automation Toolchain
  • Big-ip Carrier-grade Nat
  • Big-ip Container Ingress Services
  • Big-ip Ddos Hybrid Defender
  • Big-ip Domain Name System
  • Big-ip Edge Gateway
  • Big-ip Fraud Protection Service
  • Big-ip Global Traffic Manager
  • Big-ip Link Controller
  • Big-ip Local Traffic Manager
  • Big-ip Policy Enforcement Manager
  • Big-ip Ssl Orchestrator
  • Big-ip Webaccelerator
  • Big-ip Websafe
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-32761.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact