Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-55179
HistoryAug 03, 2022 - 12:00 a.m.

F5 BIG-IP APM and F5 SSL Orchestrator Denial of Service Vulnerability

2022-08-0300:00:00
China National Vulnerability Database
www.cnvd.org.cn
15
f5
big-ip
apm
ssl orchestrator
denial of service
vulnerability
configuration
service connect agent
memory utilization
attack
degradation of service
exploit

EPSS

0.001

Percentile

38.4%

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in F5 BIG-IP APM and F5 SSL Orchestrator, which stems from the configuration of an access with Service Connect agent on a virtual server When a policy is configured with a Service Connect agent on a virtual server, an undisclosed request may result in increased memory resource utilization, which can be exploited by an attacker to cause a degradation of service, resulting in a denial of service on the BIG-IP system.

EPSS

0.001

Percentile

38.4%

Related for CNVD-2022-55179