F5 BIG-IP up to 17.1.2/17.5.0 Traffic Management Microkernel resource pool

Summaryinfo

A vulnerability, which was classified as problematic, was found in F5 BIG-IP up to 17.1.2/17.5.0. This issue affects some unknown processing of the component Traffic Management Microkernel. Such manipulation leads to resource pool. This vulnerability is traded as CVE-2026-34019. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in F5 BIG-IP up to 17.1.2/17.5.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Traffic Management Microkernel. The manipulation with an unknown input leads to a resource pool vulnerability. Using CWE to declare the problem leads to CWE-410. The product's resource pool is not large enough to handle peak demand, which allows an attacker to prevent others from accessing the resource by using a (relatively) large number of requests for resources. Impacted is availability. CVE summarizes:

When Bidirectional Forwarding Detection (BFD) is configured in Static and Dynamic routing protocols, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to stop processing BFD packets and cause the configured routing protocol to fail over.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

The advisory is available at my.f5.com. This vulnerability is handled as CVE-2026-34019 since 05/01/2026. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. The technical details are unknown and an exploit is not available. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 05/22/2026). This vulnerability is assigned to T1499 by the MITRE ATT&CK project.

The vulnerability scanner Nessus provides a plugin with the ID 316120 (F5 Networks BIG-IP : BIG-IP BFD vulnerability (K000150508)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 17.1.3 or 17.5.1 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (316120). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Firewall Software

Vendor

• F5

Name

• BIG-IP

Version

• 17.0
• 17.1
• 17.1.0
• 17.1.1
• 17.1.2
• 17.2
• 17.3
• 17.4
• 17.5.0

License

• commercial

Website

• Vendor: https://f5.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion