PT-2022-15795 · F5 · F5 Big-Ip
Published
2022-01-25
·
Updated
2022-02-01
·
CVE-2022-23029
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
F5 BIG-IP versions 13.1.x
F5 BIG-IP versions 12.1.x
F5 BIG-IP versions 11.6.x
F5 BIG-IP versions 14.1.x through 14.1.4.3
F5 BIG-IP versions 15.1.x through 15.1.4
F5 BIG-IP versions 16.x through 16.0.x
Description
When a FastL4 profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization.
Recommendations
For F5 BIG-IP versions 13.1.x, consider upgrading to a version that is still supported.
For F5 BIG-IP versions 12.1.x, consider upgrading to a version that is still supported.
For F5 BIG-IP versions 11.6.x, consider upgrading to a version that is still supported.
For F5 BIG-IP versions 14.1.x through 14.1.4.3, update to version 14.1.4.4 or later.
For F5 BIG-IP versions 15.1.x through 15.1.4, update to version 15.1.4.1 or later.
For F5 BIG-IP versions 16.x through 16.0.x, update to version 16.1.0 or later.
Fix
Time Of Check To Time Of Use
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
F5 Big-Ip