PT-2022-26062 · F5 · F5 Big-Ip+1
Published
2022-10-19
·
Updated
2022-10-24
·
CVE-2022-41770
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
F5 BIG-IP versions 13.1.x through 17.0.x before 17.0.0.1
F5 BIG-IP versions 14.1.x through 14.1.x before 14.1.5.1
F5 BIG-IP versions 15.1.x through 15.1.x before 15.1.7
F5 BIG-IP versions 16.1.x through 16.1.x before 16.1.3.1
F5 BIG-IQ versions 7.x
F5 BIG-IQ versions 8.x
Description
An authenticated iControl REST user can cause an increase in memory resource utilization via undisclosed requests.
Recommendations
For F5 BIG-IP versions 13.1.x, update to a version after 17.0.0.1 or apply the relevant patch.
For F5 BIG-IP versions 14.1.x before 14.1.5.1, update to version 14.1.5.1 or later.
For F5 BIG-IP versions 15.1.x before 15.1.7, update to version 15.1.7 or later.
For F5 BIG-IP versions 16.1.x before 16.1.3.1, update to version 16.1.3.1 or later.
For F5 BIG-IP versions 17.0.x before 17.0.0.1, update to version 17.0.0.1 or later.
For F5 BIG-IQ versions 7.x and 8.x, update to a version that is not affected by this issue, as all versions of 7.x and 8.x are vulnerable.
Fix
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
F5 Big-Ip
F5 Big-Iq