CVE-2023-22839

CVE-2023-22839 affects BIG-IP DNS profiles with Rapid Response Mode enabled on virtual servers with hardware SYN cookies, causing TMM termination and potential DoS when undisclosed requests are processed. Affected versions include 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1...

CVE-2023-22422 HTTP profile vulnerability

On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, when a HTTP profile with the non-default Enforcement options of Enforce HTTP Compliance and Unknown Methods: Reject are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to...

CVE-2023-22341 BIG-IP APM OAuth vulnerability

On version 14.1.x before 14.1.5.3, and all versions of 13.1.x, when the BIG-IP APM system is configured with all the following elements, undisclosed requests may cause the Traffic Management Microkernel TMM to terminate: An OAuth Server that references an OAuth Provider An OAuth profile with the...

CVE-2023-22340 BIG-IP SIP profile vulnerability

On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technic...

CVE-2023-22340

CVE-2023-22340 affects F5 BIG-IP SIP profile when configured on a Message Routing type virtual server. The root cause is a traffic-triggered condition that can cause the TMM process to terminate, resulting in DoS. Affected versions include BIG-IP 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1...

CVE-2023-22340 BIG-IP SIP profile vulnerability

On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technic...

CVE-2023-22302 BIG-IP HTTP profile vulnerability

In BIG-IP versions 17.0.x before 17.0.0.2, and 16.1.x beginning in 16.1.2.2 to before 16.1.3.3, when an HTTP profile is configured on a virtual server and conditions beyond the attacker’s control exist on the target pool member, undisclosed requests sent to the BIG-IP system can cause the Traffic...

CVE-2023-22302

CVE-2023-22302 affects BIG-IP: versions 17.0.x before 17.0.0.2 and 16.1.x from 16.1.2.2 up to before 16.1.3.3. When an HTTP profile is configured on a virtual server and conditions beyond the attacker’s control exist on the target pool member, undisclosed requests sent to BIG-IP can cause the Tra...

CVE-2023-22281 BIG-IP AFM vulnerability

On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a BIG-IP AFM NAT policy with a destination NAT rule is configured on a FastL4 virtual server, undisclosed traffic can cause the Traffic Management Microkernel...

CVE-2023-22281

CVE-2023-22281 affects F5 BIG-IP AFM: when a NAT policy with a destination NAT rule is configured on a FastL4 virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate, leading to a DoS as TMM restarts. Affected product/version details (per K46048342): BI...

K43881487: HTTP profile vulnerability CVE-2023-22422

Security Advisory Description When an HTTP profile with the non-default Enforcement options Enforce RFC Compliance and Unknown Methods: Reject are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. CVE-2023-22422 Impact Traffic is...

K56676554: BIG-IP HTTP/2 profile vulnerability CVE-2023-22664

Security Advisory Description When a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, undisclosed requests can cause an increase in memory resource utilization. CVE-2023-22664 Impact System performance can degrade until the Traffic Management Microkernel...

K37708118: BIG-IP DNS profile vulnerability CVE-2023-22839

Security Advisory Description When a DNS profile with the Rapid Response Mode setting enabled is configured on a virtual server with hardware SYN cookies enabled, undisclosed requests cause the Traffic Management Microkernel TMM to terminate. CVE-2023-22839 Impact Traffic is disrupted while the T...

K46048342: BIG-IP AFM vulnerability CVE-2023-22281

Security Advisory Description When a BIG-IP AFM NAT policy with a destination NAT rule is configured on a FastL4 virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. CVE-2023-22281 Impact Traffic is disrupted while the TMM process restarts. This...

K08182564: BIG-IP SIP profile vulnerability CVE-2023-22842

Security Advisory Description When a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. CVE-2023-22842 Impact Traffic is disrupted while the TMM process restarts. This vulnerability allows a remote...

F5 BIG-IP 缓冲区错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP SIP profile, where undisclosed traffic could cause TMM to terminate...

F5 BIG-IP Virtual Edition Denial of Service Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in F5 BIG-IP Virtual Edition, where undisclosed traffic when configuring the FastL4...

F5 BIG-IP SIP profile denial of service vulnerability (CNVD-2023-05958)

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP SIP profile, where undisclosed traffic could cause TMM to terminate...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in F5 BIG-IP that can be exploited to cause TMM to terminate when an HTT profile is...

F5 BIG-IP SIP profile denial of service vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP SIP profile, where undisclosed traffic could cause TMM to terminate...