CVE-2022-23016

On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS a...

CVE-2022-23014

Summary (CVE-2022-23014): On BIG-IP APM portal access configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate, potentially disrupting traffic (DoS). Affected versions: 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1. Remediation: upgrad...

CVE-2022-23014

On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP APM portal access is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not...

CVE-2022-23025: NULL Pointer Dereference

On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, when a SIP ALG profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reache...

CVE-2022-23021: NULL Pointer Dereference

On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate: HTTP redirect rule in an LTM policy, BIG-IP APM Access Profile, and Explicit HTTP Proxy in HTTP...

PT-2022-15782

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 15.1.x through 15.1.4.0 F5 BIG-IP versions 16.1.x through 16.1.1 Description The issue occurs when BIG-IP APM portal access is configured on a virtual server, allowing undisclosed requests to cause the Traffic Management...

PT-2022-15785

Name of the Vulnerable Software and Affected Versions BIG-IP versions 13.1.x BIG-IP versions 14.1.x through 14.1.4.4 BIG-IP versions 15.1.x through 15.1.4.0 BIG-IP versions 16.x through 16.0.x Description When a virtual server is configured with a DNS profile with the Rapid Response Mode setting...

PT-2022-15786

Name of the Vulnerable Software and Affected Versions BIG-IP AFM versions 13.1.3.4 through 16.1.x before 16.1.2 BIG-IP AFM versions 14.1.x before 14.1.4.5 BIG-IP AFM versions 15.1.x before 15.1.4.1 Description When a virtual server is configured with both HTTP protocol security and HTTP Proxy...

PT-2022-15790

Name of the Vulnerable Software and Affected Versions BIG-IP versions 16.1.x through 16.1.1 Description When an HTTP profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Recommendations For BIG-IP versions 16.1.x through...

CVE-2022-23014: Improper Input Validation

On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP APM portal access is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not...

CVE-2022-23018: Improper Handling of Exceptional Conditions

On BIG-IP AFM version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and 13.1.x beginning in 13.1.3.4, when a virtual server is configured with both HTTP protocol security and HTTP Proxy Connect profiles, undisclosed requests can cause the Traffic Management Microkernel TMM...

PT-2022-15780

Name of the Vulnerable Software and Affected Versions BIG-IP versions 15.1.x through 15.1.4.0 BIG-IP versions 14.1.x through 14.1.4.4 Description The issue occurs when the HTTP/2 profile is configured on a virtual server, allowing undisclosed requests to cause the Traffic Management Microkernel T...

PT-2022-15791

Name of the Vulnerable Software and Affected Versions BIG-IP AFM versions 13.1.x BIG-IP AFM versions 14.1.x through 14.1.4.1 BIG-IP AFM versions 15.1.x through 15.1.4 BIG-IP AFM versions 16.x through 16.0.x Description When the IPsec application layer gateway ALG logging profile is configured on ...

PT-2022-15789

Name of the Vulnerable Software and Affected Versions BIG-IP versions 16.1.x through 16.1.1 Description The issue arises when specific configurations are set up on a virtual server, including an HTTP redirect rule in an LTM policy, a BIG-IP APM Access Profile, and an Explicit HTTP Proxy in an HTT...

F5 Networks BIG-IP : HTTP/2 profile vulnerability (K26310765)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.4.5 / 15.1.4.1 / 16.0.0. It is, therefore, affected by a vulnerability as referenced in the K26310765 advisory. - On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is...

F5 Networks BIG-IP : BIG-IP AFM virtual server vulnerability (K24358905)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5 / 14.1.4.5 / 15.1.4.1 / 16.1.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K24358905 advisory. - On BIG-IP AFM version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before...

F5 Networks BIG-IP : TMM vulnerability (K57111075)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K57111075 advisory. - On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server,...

F5 Networks BIG-IP : BIG-IP APM portal access vulnerability (K93526903)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.4.1 / 16.1.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K93526903 advisory. - On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP APM portal access is configured ...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K17514331)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K17514331 advisory. - On BIG-IP version 16.1.x before 16.1.2, when the 'Respond on Error' setting is enabled on the Request Logging profil...

F5 Networks BIG-IP : BIG-IP TMM and DNS profile vulnerability (K28042514)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.5 / 14.1.4.5 / 15.1.4.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K28042514 advisory. - On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all...