CVE-2022-41836

🗓️ 19 Oct 2022 21:25:43Reported by f5Type

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 70 Views

When 'Attack Signature False Positive Mode' enabled, undisclosed requests can cause bd process termination

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-41836	20 Oct 202202:26	–	circl
CNNVD	F5 BIG-IP 输入验证错误漏洞	19 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-41836 BIG-IP Advanced WAF and ASM bd vulnerability CVE-2022-41836	19 Oct 202221:25	–	cvelist
EUVD	EUVD-2022-45003	3 Oct 202520:07	–	euvd
F5 Networks	K30425568: Overview of F5 vulnerabilities (October 2022)	21 Feb 202320:02	–	f5
F5 Networks	K47204506: BIG-IP Advanced WAF and ASM bd vulnerability CVE-2022-41836	21 Feb 202318:47	–	f5
Tenable Nessus	F5 Networks BIG-IP : BIG-IP Advanced WAF and ASM bd vulnerability (K47204506)	19 Oct 202200:00	–	nessus
NCSC	Vulnerabilities fixed in several F5 products	20 Oct 202200:00	–	ncsc
NVD	CVE-2022-41836	19 Oct 202222:15	–	nvd
Prion	Code injection	19 Oct 202222:15	–	prion

NVD

Node

f5 big-ip_advanced_web_application_firewallRange15.1.0–15.1.7

f5 big-ip_advanced_web_application_firewallRange16.1.0–16.1.3.1

f5 big-ip_advanced_web_application_firewallMatch17.0.0

f5 big-ip_application_security_managerRange15.1.0–15.1.7

f5 big-ip_application_security_managerRange16.1.0–16.1.3.1

f5 big-ip_application_security_managerMatch17.0.0

[
  {
    "vendor": "F5",
    "product": "BIG-IP Advanced WAF & ASM",
    "versions": [
      {
        "version": "17.0.x",
        "status": "affected",
        "lessThan": "17.0.0.1",
        "versionType": "custom"
      },
      {
        "version": "16.1.x",
        "status": "affected",
        "lessThan": "16.1.3.1",
        "versionType": "custom"
      },
      {
        "version": "15.1.x",
        "status": "affected",
        "lessThan": "15.1.7",
        "versionType": "custom"
      },
      {
        "version": "14.1.0",
        "status": "unaffected",
        "lessThan": "14.1.x*",
        "versionType": "custom"
      },
      {
        "version": "13.1.0",
        "status": "unaffected",
        "lessThan": "13.1.x*",
        "versionType": "custom"
      }
    ]
  }
]