K16187341 : BIG-IP ICAP profile vulnerability CVE-2022-27189

Security Advisory Description

When an Internet Content Adaptation Protocol (ICAP) profile is configured on a virtual server, undisclosed traffic can cause an increase in Traffic Management Microkernel (TMM) memory resource utilization. (CVE-2022-27189)

Impact

Traffic is disrupted while the TMM process restarts. This vulnerability allows a remote unauthenticated attacker to cause a denial-of-service (DoS) on the BIG-IP system.

There is no control plane exposure; this is a data plane issue only.