PT-2021-15327 · F5 · Big-Ip

Published 2021-03-31 · Updated 2021-04-05 · CVE-2021-23000

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions BIG-IP versions 13.1.3.4 through 13.1.3.6 BIG-IP version 12.1.5.2

Description A specific sequence of malicious requests may cause TMM to restart in rare instances if the tmm.http.rfc.enforcement BigDB key is enabled or the Bad host header value is checked in the AFM HTTP security profile associated with a virtual server.

Recommendations For BIG-IP versions 13.1.3.4 through 13.1.3.6, consider disabling the tmm.http.rfc.enforcement BigDB key as a temporary workaround until a patch is available. For BIG-IP version 12.1.5.2, restrict access to the AFM HTTP security profile associated with a virtual server to minimize the risk of exploitation. Avoid using the Bad host header value in the AFM HTTP security profile until the issue is resolved.

Fix

Related Identifiers

CVE-2021-23000

Affected Products

Big-Ip

References · 4

• https://osv.dev/vulnerability/CVE-2021-23000 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-23000 · Security Note
• https://support.f5.com/csp/article/K34441555 · Vendor Advisory
• https://t.me/cvenotify/12410 · Telegram Post