CVE-2022-41833

🗓️ 19 Oct 2022 21:24:25Reported by f5Type

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 66 Views

In all BIG-IP 13.1.x versions, an iRule with HTTP::collect command can cause TMM termination

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2022-41833	20 Oct 202202:26	–	circl
CNNVD	F5 BIG-IP 资源管理错误漏洞	19 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-41833 BIG-IP iRule vulnerability CVE-2022-41833	19 Oct 202221:24	–	cvelist
EUVD	EUVD-2022-45000	3 Oct 202520:07	–	euvd
F5 Networks	K30425568: Overview of F5 vulnerabilities (October 2022)	21 Feb 202320:02	–	f5
F5 Networks	K69940053: BIG-IP iRules vulnerability CVE-2022-41833	10 Jan 202318:53	–	f5
Tenable Nessus	F5 Networks BIG-IP : BIG-IP iRules vulnerability (K69940053)	14 Jun 202300:00	–	nessus
NCSC	Vulnerabilities fixed in several F5 products	20 Oct 202200:00	–	ncsc
NVD	CVE-2022-41833	19 Oct 202222:15	–	nvd
OSV	CVE-2022-41833	19 Oct 202222:15	–	osv

NVD

Node

f5 big-ip_access_policy_managerRange13.1.0–13.1.5

f5 big-ip_advanced_firewall_managerRange13.1.0–13.1.5

f5 big-ip_analyticsRange13.1.0–13.1.5

f5 big-ip_application_acceleration_managerRange13.1.0–13.1.5

f5 big-ip_application_security_managerRange13.1.0–13.1.5

f5 big-ip_domain_name_systemRange13.1.0–13.1.5

f5 big-ip_fraud_protection_serviceRange13.1.0–13.1.5

f5 big-ip_global_traffic_managerRange13.1.0–13.1.5

f5 big-ip_link_controllerRange13.1.0–13.1.5

f5 big-ip_local_traffic_managerRange13.1.0–13.1.5

f5 big-ip_policy_enforcement_managerRange13.1.0–13.1.5

[
  {
    "vendor": "F5",
    "product": "BIG-IP",
    "versions": [
      {
        "version": "17.0.0",
        "status": "unaffected",
        "lessThan": "17.0.x*",
        "versionType": "custom"
      },
      {
        "version": "16.1.x",
        "status": "unaffected",
        "lessThanOrEqual": "16.1.0",
        "versionType": "custom"
      },
      {
        "version": "15.1.0",
        "status": "unaffected",
        "lessThan": "15.1.x*",
        "versionType": "custom"
      },
      {
        "version": "14.1.0",
        "status": "unaffected",
        "lessThan": "14.1.x*",
        "versionType": "custom"
      },
      {
        "version": "13.1.0",
        "status": "affected",
        "lessThan": "13.1.x*",
        "versionType": "custom"
      }
    ]
  }
]