CVE-2022-23017: NULL Pointer Dereference

On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when a virtual server is configured with a DNS profile with the Rapid Response Mode setting enabled and is configured on a BIG-IP system, undisclosed requests can cause the Traffic...

CVE-2022-23018: Improper Handling of Exceptional Conditions

On BIG-IP AFM version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and 13.1.x beginning in 13.1.3.4, when a virtual server is configured with both HTTP protocol security and HTTP Proxy Connect profiles, undisclosed requests can cause the Traffic Management Microkernel TMM...

CVE-2022-23012: Double Free

On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not...

CVE-2022-23016: NULL Pointer Dereference

On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS a...

CVE-2022-23014: Improper Input Validation

On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP APM portal access is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not...

PT-2022-15792

Name of the Vulnerable Software and Affected Versions BIG-IP versions 13.1.x BIG-IP versions 14.1.x through 14.1.4.3 BIG-IP versions 15.1.x through 15.1.3 BIG-IP versions 16.1.x through 16.1.0 Description When a SIP ALG profile is configured on a virtual server, undisclosed requests can cause the...

PT-2022-15788

Name of the Vulnerable Software and Affected Versions BIG-IP versions 16.1.x before 16.1.2 Description The issue occurs when the 'Respond on Error' setting is enabled on the Request Logging profile and configured on a virtual server, allowing undisclosed requests to cause the Traffic Management...

PT-2022-15785

Name of the Vulnerable Software and Affected Versions BIG-IP versions 13.1.x BIG-IP versions 14.1.x through 14.1.4.4 BIG-IP versions 15.1.x through 15.1.4.0 BIG-IP versions 16.x through 16.0.x Description When a virtual server is configured with a DNS profile with the Rapid Response Mode setting...

PT-2022-15786

Name of the Vulnerable Software and Affected Versions BIG-IP AFM versions 13.1.3.4 through 16.1.x before 16.1.2 BIG-IP AFM versions 14.1.x before 14.1.4.5 BIG-IP AFM versions 15.1.x before 15.1.4.1 Description When a virtual server is configured with both HTTP protocol security and HTTP Proxy...

PT-2022-15790

Name of the Vulnerable Software and Affected Versions BIG-IP versions 16.1.x through 16.1.1 Description When an HTTP profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Recommendations For BIG-IP versions 16.1.x through...

PT-2022-15784

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 15.1.x through 15.1.4.0 F5 BIG-IP versions 16.1.x through 16.1.1 Description The issue occurs when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server. Undisclosed requests can cause the Traffic Managemen...

PT-2022-15789

Name of the Vulnerable Software and Affected Versions BIG-IP versions 16.1.x through 16.1.1 Description The issue arises when specific configurations are set up on a virtual server, including an HTTP redirect rule in an LTM policy, a BIG-IP APM Access Profile, and an Explicit HTTP Proxy in an HTT...

PT-2022-15780

Name of the Vulnerable Software and Affected Versions BIG-IP versions 15.1.x through 15.1.4.0 BIG-IP versions 14.1.x through 14.1.4.4 Description The issue occurs when the HTTP/2 profile is configured on a virtual server, allowing undisclosed requests to cause the Traffic Management Microkernel T...

F5 Networks BIG-IP : TMM vulnerability (K57111075)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K57111075 advisory. - On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server,...

F5 BIG-IP Traffic Management Microkernel Buffer Overflow

The Traffic Management Microkernel of BIG-IP ASM Risk Engine has a buffer overflow vulnerability, leading to a bypassing of URL-based access controls...

Huawei HarmonyOS eID component memory out-of-bounds write vulnerability

Huawei HarmonyOS is an operating system from Huawei China. A security vulnerability exists in the eID component of Huawei HarmonyOS, which provides a microkernel-based, fully-scoped distributed operating system. An attacker could exploit this vulnerability to compromise confidentiality...

Huawei HarmonyOS memory uninitialized usage vulnerability

Huawei HarmonyOS is an operating system from Huawei China. A security vulnerability exists in the eID component of Huawei HarmonyOS, which provides a microkernel-based, fully-scoped distributed operating system. An attacker could exploit this vulnerability to compromise confidentiality...

Huawei HarmonyOS Buffer Overflow Vulnerability (CNVD-2022-12806)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS 2.0 Bone Voice TA. Successful exploitation of this vulnerability could result in compromised...

Huawei HarmonyOS Out-of-Bounds Read Vulnerability (CNVD-2022-17715)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. A security vulnerability exists in Huawei HarmonyOS, which provides a microkernel-based, fully-scoped distributed operating system. An attacker could exploit this vulnerability to compromise confidentiality...

Huawei HarmonyOS VoWifi Component VC Access Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. A vulnerability exists in the Huawei HarmonyOS VoWifi component, which provides a microkernel-based, full-scenario distributed operating system. An attacker could exploit this vulnerability to potentially compromise confidentiality...