K08476614 : BIG-IP Client SSL profile vulnerability CVE-2022-23015

Security Advisory Description

When a Client SSL profile is configured on a virtual server with Client Certificate Authentication set to request/require and Session Ticket enabled and configured, processing SSL traffic can cause an increase in memory resource utilization. (CVE-2022-23015)

Impact

System performance can degrade until the process is either forced to restart or is manually restarted. This vulnerability allows a remote unauthenticated attacker to cause a degradation of service that can lead to a denial-of-service (DoS) on the BIG-IP system.