PT-2021-15325 · F5 · Big-Ip

Published 2021-03-31 · Updated 2021-04-05 · CVE-2021-22998

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions BIG-IP versions 16.0.x through 16.0.1.0 BIG-IP versions 15.1.x through 15.1.2.0 BIG-IP versions 14.1.x through 14.1.3 BIG-IP versions 13.1.x through 13.1.3.5 BIG-IP versions 12.1.x through 12.1.5.2 BIG-IP versions 11.6.x through 11.6.5.2

Description The issue arises from the lack of enforcement of SYN flood protection thresholds in secure network address translation (SNAT) listeners. This could potentially lead to security issues, but specific details about the estimated number of affected devices or real-world incidents are not provided.

Recommendations For BIG-IP versions 16.0.x, update to version 16.0.1.1 or later. For BIG-IP versions 15.1.x, update to version 15.1.2.1 or later. For BIG-IP versions 14.1.x, update to version 14.1.4 or later. For BIG-IP versions 13.1.x, update to version 13.1.3.6 or later. For BIG-IP versions 12.1.x, update to version 12.1.5.3 or later. For BIG-IP versions 11.6.x, update to version 11.6.5.3 or later.

Fix

Related Identifiers

CVE-2021-22998

Affected Products

Big-Ip

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-22998 · Security Note
• https://support.f5.com/csp/article/K31934524 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-22998 · Vendor Advisory