F5 BIG-IP TMM iRule Denial of Service Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP TMM iRule, which stems from the fact that when configuring a BIG-IP APM access policy on a virtual server, undisclosed traffic may cause the traffic management microkernel ( TMM) to terminate, which could be exploited by an attacker to cause a denial of service on the BIG-IP system in the event of a failover or TMM restart.