Lucene search

[email protected]NVD:CVE-2023-22839

HistoryFeb 01, 2023 - 6:15 p.m.

CVE-2023-22839

2023-02-0118:15:11

CWE-476

[email protected]

web.nvd.nist.gov

dns profile

rapid response mode

tmm termination

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

33.8%

JSON

On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all version of 13.1.x, when a DNS profile with the Rapid Response Mode setting enabled is configured on a virtual server with hardware SYN cookies enabled, undisclosed requests cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected configurations

NVD

Node

f5big-ip_domain_name_systemRange13.1.0–13.1.5

f5big-ip_domain_name_systemRange14.1.0–14.1.5.3

f5big-ip_domain_name_systemRange15.1.0–15.1.7

f5big-ip_domain_name_systemRange16.1.0–16.1.3.3

f5big-ip_domain_name_systemRange17.0.0–17.0.0.2

f5big-ip_local_traffic_managerRange13.1.0–13.1.5

f5big-ip_local_traffic_managerRange14.1.0–14.1.5.3

f5big-ip_local_traffic_managerRange15.1.0–15.1.7

f5big-ip_local_traffic_managerRange16.1.0–16.1.3.3

f5big-ip_local_traffic_managerRange17.0.0–17.0.0.2

Node

f5big-ip_10000s_firmwareMatch-

AND

f5big-ip_10000sMatch-

Node

f5big-ip_10200v_firmwareMatch-

AND

f5big-ip_10200vMatch-

Node

f5big-ip_10200v-ssl_firmwareMatch-

AND

f5big-ip_10200v-sslMatch-

Node

f5big-ip_12000_firmwareMatch-

AND

f5big-ip_12000Match-

Node

f5big-ip_5000s_firmwareMatch-

AND

f5big-ip_5000sMatch-

Node

f5big-ip_5200v_firmwareMatch-

AND

f5big-ip_5200vMatch-

Node

f5big-ip_5200v-ssl_firmwareMatch-

AND

f5big-ip_5200v-sslMatch-

Node

f5big-ip_7000s_firmwareMatch-

AND

f5big-ip_7000sMatch-

Node

f5big-ip_7200v_firmwareMatch-

AND

f5big-ip_7200vMatch-

Node

f5big-ip_7200v-ssl_firmwareMatch-

AND

f5big-ip_7200v-sslMatch-

Node

f5big-ip_i10600_firmwareMatch-

AND

f5big-ip_i10600Match-

Node

f5big-ip_i10800_firmwareMatch-

AND

f5big-ip_i10800Match-

Node

f5big-ip_i11600_firmwareMatch-

AND

f5big-ip_i11600Match-

Node

f5big-ip_i11800_firmwareMatch-

AND

f5big-ip_i11800Match-

Node

f5big-ip_i15600_firmwareMatch-

AND

f5big-ip_i15600Match-

Node

f5big-ip_i15800_firmwareMatch-

AND

f5big-ip_i15800Match-

Node

f5big-ip_i5600_firmwareMatch-

AND

f5big-ip_i5600Match-

Node

f5big-ip_i5800_firmwareMatch-

AND

f5big-ip_i5800Match-

Node

f5big-ip_i7600_firmwareMatch-

AND

f5big-ip_i7600Match-

Node

f5big-ip_i7800_firmwareMatch-

AND

f5big-ip_i7800Match-

Node

f5r10600_firmwareMatch-

AND

f5r10600Match-

Node

f5r10800_firmwareMatch-

AND

f5r10800Match-

Node

f5r10900_firmwareMatch-

AND

f5r10900Match-

Node

f5r5600_firmwareMatch-

AND

f5r5600Match-

Node

f5r5800_firmwareMatch-

AND

f5r5800Match-

Node

f5r5900_firmwareMatch-

AND

f5r5900Match-

Node

f5velos_bx110_firmwareMatch-

AND

f5velos_bx110Match-

Node

f5viprion_b2100_firmwareMatch-

AND

f5viprion_b2100Match-

Node

f5viprion_b2150_firmwareMatch-

AND

f5viprion_b2150Match-

Node

f5viprion_b2250_firmwareMatch-

AND

f5viprion_b2250Match-

Node

f5viprion_b4300_firmwareMatch-

AND

f5viprion_b4300Match-

Node

f5viprion_b4450_firmwareMatch-

AND

f5viprion_b4450Match-

References

my.f5.com/manage/s/article/K37708118

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

33.8%

JSON

Related for NVD:CVE-2023-22839

prion1 cvelist1 f52 cnvd1 cve1 nessus1