Design/Logic Flaw

2023-02-0118:15:00

PRIOn knowledge base

www.prio-n.com

security policy

memory utilization

big-ip advanced waf

virtual server

undisclosed requests

0.001 Low

EPSS

Percentile

33.7%

JSON

On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.0 before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a BIG-IP Advanced WAF or BIG-IP ASM security policy is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CPENameOperatorVersion
big-ip_advanced_web_application_firewallge13.1.0
big-ip_advanced_web_application_firewallle13.1.5
big-ip_advanced_web_application_firewallge17.0.0
big-ip_advanced_web_application_firewalllt17.0.0.2
big-ip_advanced_web_application_firewallge16.1.0
big-ip_advanced_web_application_firewalllt16.1.3.3
big-ip_advanced_web_application_firewallge15.1.0
big-ip_advanced_web_application_firewalllt15.1.8
big-ip_advanced_web_application_firewallge14.1.0
big-ip_advanced_web_application_firewalllt14.1.5.3

Name	Operator	Version
big-ip_advanced_web_application_firewall	ge	13.1.0
big-ip_advanced_web_application_firewall	le	13.1.5
big-ip_advanced_web_application_firewall	ge	17.0.0
big-ip_advanced_web_application_firewall	lt	17.0.0.2
big-ip_advanced_web_application_firewall	ge	16.1.0
big-ip_advanced_web_application_firewall	lt	16.1.3.3
big-ip_advanced_web_application_firewall	ge	15.1.0
big-ip_advanced_web_application_firewall	lt	15.1.8
big-ip_advanced_web_application_firewall	ge	14.1.0
big-ip_advanced_web_application_firewall	lt	14.1.5.3

Rows per page:

1-10 of 201

References

my.f5.com/manage/s/article/K17542533

0.001 Low

EPSS

Percentile

33.7%

JSON

Related for PRION:CVE-2023-23552