BIG-IP DNS resolver vulnerability CVE-2022-28706

When the DNS resolver configuration is used, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. (CVE-2022-28706)

Impact

Traffic is disrupted while the TMM process restarts. This vulnerability allows a remote attacker to cause a denial-of-service (DoS) on the BIG-IP system. There is no control plane exposure; this is a data plane issue only.

Note: The DNS resolver configuration is used in several BIG-IP module configurations. For more information, refer to K12140128: Overview of the DNS resolver.