CVE-2022-28691

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when a Real Time Streaming Protocol RTSP profile is configured on a virtual server, undisclosed traffic can cause an increase in Traffic...

CVE-2022-26517

On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when the BIG-IP CGNAT Large Scale NAT LSN pool is configured on a virtual server and packet filtering is enabled, undisclosed requests can cause the Traffic Management Microkern...

CVE-2022-28708

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2 and 15.1.x versions prior to 15.1.5.1, when a BIG-IP DNS resolver-enabled, HTTP-Explicit or SOCKS profile is configured on a virtual server, an undisclosed DNS response can cause the Traffic Management Microkernel TMM process to terminate. Note:...

Huawei HarmonyOS DFX module post-release reuse vulnerability

Huawei HarmonyOS is an operating system from Huawei China. A post-release reuse vulnerability exists in the Huawei HarmonyOS DFX module, which provides a microkernel-based, full-scenario distributed operating system. The vulnerability stems from a confusion in the DFX module's instructions for...

Huawei HarmonyOS Denial of Service Vulnerability (CNVD-2022-44620)

Huawei HarmonyOS is an operating system from Huawei, China. A denial-of-service vulnerability exists in the Huawei HarmonyOS application framework, which provides a microkernel-based, full-scenario distributed operating system. The vulnerability stems from a failure to properly handle incoming...

Huawei HarmonyOS Business Logic Error Vulnerability (CNVD-2022-53579)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A business logic error vulnerability exists in the Huawei HarmonyOS communication module. The vulnerability stems from a business logic error in the...

Huawei HarmonyOS DFX module access control error vulnerability

Huawei HarmonyOS is an operating system from Huawei China. An access control error vulnerability exists in the Huawei HarmonyOS DFX module, which provides a microkernel-based, full-scenario distributed operating system. The vulnerability stems from a network system or product that does not proper...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, China. A denial-of-service vulnerability exists in the Huawei HarmonyOS application framework, which provides a microkernel-based, full-scenario distributed operating system. The vulnerability stems from a failure to properly handle incoming...

CVE-2022-23016

On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS a...

CVE-2022-23016

On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS a...

CVE-2022-23014

On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP APM portal access is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not...

CVE-2022-23022

On BIG-IP version 16.1.x before 16.1.2, when an HTTP profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2022-23014

On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP APM portal access is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not...

CVE-2022-23024

On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.2, and all versions of 13.1.x, when the IPsec application layer gateway ALG logging profile is configured on an IPsec ALG virtual server, undisclosed IPsec traffic can cause the Traffic Management Microkernel T...

Design/Logic Flaw

On BIG-IP version 16.1.x before 16.1.2, when the 'Respond on Error' setting is enabled on the Request Logging profile and configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical...

PT-2022-15789

Name of the Vulnerable Software and Affected Versions BIG-IP versions 16.1.x through 16.1.1 Description The issue arises when specific configurations are set up on a virtual server, including an HTTP redirect rule in an LTM policy, a BIG-IP APM Access Profile, and an Explicit HTTP Proxy in an HTT...

PT-2022-15788

Name of the Vulnerable Software and Affected Versions BIG-IP versions 16.1.x before 16.1.2 Description The issue occurs when the 'Respond on Error' setting is enabled on the Request Logging profile and configured on a virtual server, allowing undisclosed requests to cause the Traffic Management...

PT-2022-15792

Name of the Vulnerable Software and Affected Versions BIG-IP versions 13.1.x BIG-IP versions 14.1.x through 14.1.4.3 BIG-IP versions 15.1.x through 15.1.3 BIG-IP versions 16.1.x through 16.1.0 Description When a SIP ALG profile is configured on a virtual server, undisclosed requests can cause the...

PT-2022-15790

Name of the Vulnerable Software and Affected Versions BIG-IP versions 16.1.x through 16.1.1 Description When an HTTP profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Recommendations For BIG-IP versions 16.1.x through...

PT-2022-15786

Name of the Vulnerable Software and Affected Versions BIG-IP AFM versions 13.1.3.4 through 16.1.x before 16.1.2 BIG-IP AFM versions 14.1.x before 14.1.4.5 BIG-IP AFM versions 15.1.x before 15.1.4.1 Description When a virtual server is configured with both HTTP protocol security and HTTP Proxy...