PT-2022-15785

Name of the Vulnerable Software and Affected Versions BIG-IP versions 13.1.x BIG-IP versions 14.1.x through 14.1.4.4 BIG-IP versions 15.1.x through 15.1.4.0 BIG-IP versions 16.x through 16.0.x Description When a virtual server is configured with a DNS profile with the Rapid Response Mode setting...

PT-2022-15784

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 15.1.x through 15.1.4.0 F5 BIG-IP versions 16.1.x through 16.1.1 Description The issue occurs when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server. Undisclosed requests can cause the Traffic Managemen...

PT-2022-15780

Name of the Vulnerable Software and Affected Versions BIG-IP versions 15.1.x through 15.1.4.0 BIG-IP versions 14.1.x through 14.1.4.4 Description The issue occurs when the HTTP/2 profile is configured on a virtual server, allowing undisclosed requests to cause the Traffic Management Microkernel T...

CVE-2022-23014: Improper Input Validation

On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP APM portal access is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not...

CVE-2022-23021: NULL Pointer Dereference

On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate: HTTP redirect rule in an LTM policy, BIG-IP APM Access Profile, and Explicit HTTP Proxy in HTTP...

CVE-2022-23025: NULL Pointer Dereference

On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, when a SIP ALG profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reache...

CVE-2022-23024: Uncontrolled Resource Consumption

On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.2, and all versions of 13.1.x, when the IPsec application layer gateway ALG logging profile is configured on an IPsec ALG virtual server, undisclosed IPsec traffic can cause the Traffic Management Microkernel T...

CVE-2022-23022: NULL Pointer Dereference

On BIG-IP version 16.1.x before 16.1.2, when an HTTP profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2022-23018: Improper Handling of Exceptional Conditions

On BIG-IP AFM version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and 13.1.x beginning in 13.1.3.4, when a virtual server is configured with both HTTP protocol security and HTTP Proxy Connect profiles, undisclosed requests can cause the Traffic Management Microkernel TMM...

CVE-2022-23020: NULL Pointer Dereference

On BIG-IP version 16.1.x before 16.1.2, when the 'Respond on Error' setting is enabled on the Request Logging profile and configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical...

CVE-2022-23017: NULL Pointer Dereference

On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when a virtual server is configured with a DNS profile with the Rapid Response Mode setting enabled and is configured on a BIG-IP system, undisclosed requests can cause the Traffic...

CVE-2022-23012: Double Free

On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not...

CVE-2022-23016: NULL Pointer Dereference

On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS a...

F5 Networks BIG-IP : TMM vulnerability (K57111075)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K57111075 advisory. - On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server,...

F5 BIG-IP Traffic Management Microkernel Buffer Overflow

The Traffic Management Microkernel of BIG-IP ASM Risk Engine has a buffer overflow vulnerability, leading to a bypassing of URL-based access controls...

Huawei HarmonyOS Buffer Overflow Vulnerability (CNVD-2022-12806)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS 2.0 Bone Voice TA. Successful exploitation of this vulnerability could result in compromised...

Huawei HarmonyOS eID component memory out-of-bounds write vulnerability

Huawei HarmonyOS is an operating system from Huawei China. A security vulnerability exists in the eID component of Huawei HarmonyOS, which provides a microkernel-based, fully-scoped distributed operating system. An attacker could exploit this vulnerability to compromise confidentiality...

Huawei HarmonyOS memory uninitialized usage vulnerability

Huawei HarmonyOS is an operating system from Huawei China. A security vulnerability exists in the eID component of Huawei HarmonyOS, which provides a microkernel-based, fully-scoped distributed operating system. An attacker could exploit this vulnerability to compromise confidentiality...

Huawei HarmonyOS Out-of-Bounds Read Vulnerability (CNVD-2022-17715)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. A security vulnerability exists in Huawei HarmonyOS, which provides a microkernel-based, fully-scoped distributed operating system. An attacker could exploit this vulnerability to compromise confidentiality...

Huawei HarmonyOS has an unspecified vulnerability (CNVD-2022-08315)

Huawei HarmonyOS is an operating system from Huawei, China. A security vulnerability exists in a component of Huawei HarmonyOS, which provides a microkernel-based, fully-scoped distributed operating system. An attacker could exploit this vulnerability to compromise confidentiality...