Lucene search

[email protected]CVE-2022-41787

HistoryOct 19, 2022 - 10:15 p.m.

CVE-2022-41787

2022-10-1922:15:13

CWE-476

[email protected]

web.nvd.nist.gov

cve-2022-41787

big-ip

dns profile

virtual server

dns express

tmm

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

JSON

In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS queries with DNSSEC can cause TMM to terminate.

Affected configurations

NVD

Node

f5big-ip_domain_name_systemRange13.1.0–13.1.5.1

f5big-ip_domain_name_systemRange14.1.0–14.1.5.1

f5big-ip_domain_name_systemRange15.1.0–15.1.6.1

f5big-ip_domain_name_systemRange16.1.0–16.1.3.1

f5big-ip_domain_name_systemRange17.0.0–17.0.0.1

f5big-ip_local_traffic_managerRange13.1.0–13.1.5.1

f5big-ip_local_traffic_managerRange14.1.0–14.1.5.1

f5big-ip_local_traffic_managerRange15.1.0–15.1.6.1

f5big-ip_local_traffic_managerRange16.1.0–16.1.3.1

f5big-ip_local_traffic_managerRange17.0.0–17.0.0.1

CPENameOperatorVersion
f5:big-ip_domain_name_systemf5 big-ip domain name systemlt13.1.5.1
f5:big-ip_domain_name_systemf5 big-ip domain name systemlt14.1.5.1
f5:big-ip_domain_name_systemf5 big-ip domain name systemlt15.1.6.1
f5:big-ip_domain_name_systemf5 big-ip domain name systemlt16.1.3.1
f5:big-ip_domain_name_systemf5 big-ip domain name systemlt17.0.0.1
f5:big-ip_local_traffic_managerf5 big-ip local traffic managerlt13.1.5.1
f5:big-ip_local_traffic_managerf5 big-ip local traffic managerlt14.1.5.1
f5:big-ip_local_traffic_managerf5 big-ip local traffic managerlt15.1.6.1
f5:big-ip_local_traffic_managerf5 big-ip local traffic managerlt16.1.3.1
f5:big-ip_local_traffic_managerf5 big-ip local traffic managerlt17.0.0.1

CPE	Name	Operator	Version
f5:big-ip_domain_name_system	f5 big-ip domain name system	lt	13.1.5.1
f5:big-ip_domain_name_system	f5 big-ip domain name system	lt	14.1.5.1
f5:big-ip_domain_name_system	f5 big-ip domain name system	lt	15.1.6.1
f5:big-ip_domain_name_system	f5 big-ip domain name system	lt	16.1.3.1
f5:big-ip_domain_name_system	f5 big-ip domain name system	lt	17.0.0.1
f5:big-ip_local_traffic_manager	f5 big-ip local traffic manager	lt	13.1.5.1
f5:big-ip_local_traffic_manager	f5 big-ip local traffic manager	lt	14.1.5.1
f5:big-ip_local_traffic_manager	f5 big-ip local traffic manager	lt	15.1.6.1
f5:big-ip_local_traffic_manager	f5 big-ip local traffic manager	lt	16.1.3.1
f5:big-ip_local_traffic_manager	f5 big-ip local traffic manager	lt	17.0.0.1

CNA Affected

[
  {
    "vendor": "F5",
    "product": "BIG-IP DNS",
    "versions": [
      {
        "version": "17.0.x",
        "status": "affected",
        "lessThan": "17.0.0.1",
        "versionType": "custom"
      },
      {
        "version": "16.1.x",
        "status": "affected",
        "lessThan": "16.1.3.1",
        "versionType": "custom"
      },
      {
        "version": "15.1.x",
        "status": "affected",
        "lessThan": "15.1.6.1",
        "versionType": "custom"
      },
      {
        "version": "14.1.x",
        "status": "affected",
        "lessThan": "14.1.5.1",
        "versionType": "custom"
      },
      {
        "version": "13.1.x",
        "status": "affected",
        "lessThan": "13.1.5.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "F5",
    "product": "BIG-IP LTM",
    "versions": [
      {
        "version": "17.0.x",
        "status": "affected",
        "lessThan": "17.0.0.1",
        "versionType": "custom"
      },
      {
        "version": "16.1.x",
        "status": "affected",
        "lessThan": "16.1.3.1",
        "versionType": "custom"
      },
      {
        "version": "15.1.x",
        "status": "affected",
        "lessThan": "15.1.6.1",
        "versionType": "custom"
      },
      {
        "version": "14.1.x",
        "status": "affected",
        "lessThan": "14.1.5.1",
        "versionType": "custom"
      },
      {
        "version": "13.1.x",
        "status": "affected",
        "lessThan": "13.1.5.1",
        "versionType": "custom"
      }
    ]
  }
]