PT-2021-15340 · F5 · F5 Big-Ip

Published 2021-05-10 · Updated 2022-07-12 · CVE-2021-23013

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 12.1.x through 12.1.5.2 F5 BIG-IP versions 13.1.x through 13.1.3.5 F5 BIG-IP versions 14.1.x through 14.1.3 F5 BIG-IP versions 15.1.x through 15.1.2 F5 BIG-IP versions 16.0.x through 16.0.0

Description The Traffic Management Microkernel (TMM) may stop responding when processing Stream Control Transmission Protocol (SCTP) traffic under certain conditions. This issue affects TMM by way of a virtual server configured with an SCTP profile.

Recommendations For versions 12.1.x, update to version 12.1.5.3 or later. For versions 13.1.x, update to version 13.1.3.6 or later. For versions 14.1.x, update to version 14.1.4 or later. For versions 15.1.x, update to version 15.1.3 or later. For versions 16.0.x, update to version 16.0.1.1 or later.

Fix

Related Identifiers

CVE-2021-23013

Affected Products

F5 Big-Ip

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-23013 · Security Note
• https://support.f5.com/csp/article/K05300051 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-23013 · Vendor Advisory
• https://support.f5.com/csp/article/K04234247 · Vendor Advisory