CVE-2022-23021

On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate: HTTP redirect rule in an LTM policy, BIG-IP APM Access Profile, and Explicit HTTP Proxy in HTTP...

CVE-2022-23020

CVE-2022-23020 affects BIG-IP 16.1.x prior to 16.1.2, where enabling Respond on Error on the Request Logging profile (on a virtual server) can cause the Traffic Management Microkernel (TMM) to terminate, yielding a DoS. Red Hat and F5 advisories corroborate the issue and indicate the vulnerabilit...

CVE-2022-23024

On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.2, and all versions of 13.1.x, when the IPsec application layer gateway ALG logging profile is configured on an IPsec ALG virtual server, undisclosed IPsec traffic can cause the Traffic Management Microkernel T...

CVE-2022-23024

CVE-2022-23024 affects BIG-IP AFM where enabling the IPsec ALG logging profile on an IPsec ALG virtual server can cause TMM termination due to undisclosed IPsec traffic, leading to DoS. Affected versions: 16.x before 16.1.0; 15.1.x before 15.1.4.1; 14.1.x before 14.1.4.2; all 13.1.x (EoTS not eva...

CVE-2022-23022

CVE-2022-23022 pertains to BIG-IP. The vulnerability affects BIG-IP versions where an HTTP profile is configured on a virtual server, allowing undisclosed requests to cause the Traffic Management Microkernel (TMM) to terminate, potentially causing DoS. According to F5 advisory K96924184, vulnerab...

CVE-2022-23018

On BIG-IP AFM version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and 13.1.x beginning in 13.1.3.4, when a virtual server is configured with both HTTP protocol security and HTTP Proxy Connect profiles, undisclosed requests can cause the Traffic Management Microkernel TMM...

CVE-2022-23018

Concrete details: CVE-2022-23018 affects BIG-IP AFM when a virtual server uses both HTTP protocol security and HTTP Proxy Connect profiles, causing TMM termination and DoS. Affected AFM/versions per advisory: 16.1.0–16.1.1 vulnerable; fixed in 16.1.2. 15.1.x vulnerable in 15.1.2.1–15.1.4, fixed i...

CVE-2022-23017

CVE-2022-23017 affects BIG-IP: if a virtual server uses a DNS profile with Rapid Response Mode enabled, TMM can terminate due to undisclosed requests. Affected branches and versions include BIG-IP 16.0.x (16.0.0–16.0.1), 15.x (15.1.0–15.1.4), 14.x (14.1.0–14.1.4), and 13.1.x. Root cause: Rapid Re...

CVE-2022-23012

CVE-2022-23012 affects BIG-IP with HTTP/2 profile configured on a virtual server. Undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate, resulting in DoS due to TMM restart. Affected branches include BIG-IP 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5; fixed in...

CVE-2022-23012

On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not...

CVE-2022-23016

CVE-2022-23016 affects BIG-IP: TLS 1.3 in SSL Forward Proxy on a virtual server can trigger TMM termination due to undisclosed requests. Affected: BIG-IP 16.0.0–16.1.1 and 15.1.0–15.1.4. Fixes: upgrade to 16.1.2 or 15.1.4.1 (per F5 advisory K91013510). In other lines of evidence, similar advisori...

CVE-2022-23016

On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS a...

CVE-2022-23014

On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP APM portal access is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not...

CVE-2022-23014

Summary (CVE-2022-23014): On BIG-IP APM portal access configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate, potentially disrupting traffic (DoS). Affected versions: 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1. Remediation: upgrad...

F5 Networks BIG-IP : TMM vulnerability (K57111075)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K57111075 advisory. - On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server,...

F5 Networks BIG-IP : HTTP/2 profile vulnerability (K26310765)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.4.5 / 15.1.4.1 / 16.0.0. It is, therefore, affected by a vulnerability as referenced in the K26310765 advisory. - On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is...

F5 Networks BIG-IP : BIG-IP AFM vulnerability (K54892865)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5 / 14.1.4.2 / 15.1.4.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K54892865 advisory. - On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.2, and...

F5 Networks BIG-IP : BIG-IP APM portal access vulnerability (K93526903)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.4.1 / 16.1.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K93526903 advisory. - On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP APM portal access is configured ...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K17514331)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K17514331 advisory. - On BIG-IP version 16.1.x before 16.1.2, when the 'Respond on Error' setting is enabled on the Request Logging profil...

F5 Networks BIG-IP : BIG-IP AFM virtual server vulnerability (K24358905)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5 / 14.1.4.5 / 15.1.4.1 / 16.1.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K24358905 advisory. - On BIG-IP AFM version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before...