High · published October 15, 2025
⚡ A malformed JSON schema in your BIG-IP Advanced WAF could lead to unexpected shutdowns! Imagine requests causing the bd process to take a nap instead of defending your network. 😴 Think of it like a busy restaurant where the chef misreads the recipe and serves the wrong dish. Instead of a delightful meal, guests might end up with a chaotic kitchen—nobody's happy and service grinds to a halt! This vulnerability could result in the bd process crashing, leaving your security defenses exposed and your applications vulnerable. A downtime like this could mean critical data is left unprotected and attackers have a chance to make their move—yikes!
Think of it like a busy restaurant where the chef misreads the recipe and serves the wrong dish. Instead of a delightful meal, guests might end up with a chaotic kitchen—nobody's happy and service grinds to a halt! When a BIG-IP Advanced WAF or ASM Security Policy applies a malformed JSON schema, it can trigger an unexpected termination of the bd process upon certain requests, disrupting your security services.
This vulnerability could result in the bd process crashing, leaving your security defenses exposed and your applications vulnerable. A downtime like this could mean critical data is left unprotected and attackers have a chance to make their move—yikes! To remediate this vulnerability, ensure your JSON content profiles are configured correctly and validated before applying them to a virtual server. Regularly audit your security policies and consider updating to the latest version once it's available to mitigate risks. 🛡️ You've got this! By taking these steps, you'll have your security back on track in no time. 💪✨
| Product | Versions | Fixed in |
|---|---|---|
| f5/big-ip_advanced_web_application_firewall | ≥ 15.1.0, < 15.1.10.8 | 15.1.10.8 |
| f5/big-ip_advanced_web_application_firewall | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_advanced_web_application_firewall | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_advanced_web_application_firewall | ≥ 17.5.0, < 17.5.1.3 | 17.5.1.3 |
| f5/big-ip_application_security_manager | ≥ 15.1.0, < 15.1.10.8 | 15.1.10.8 |
| f5/big-ip_application_security_manager | ≥ 16.1.0, < 16.1.6.1 | 16.1.6.1 |
| f5/big-ip_application_security_manager | ≥ 17.1.0, < 17.1.3 | 17.1.3 |
| f5/big-ip_application_security_manager | ≥ 17.5.0, < 17.5.1.3 | 17.5.1.3 |