PT-2022-26081 · F5 · F5 Big-Ip

Published 2022-10-19 · Updated 2022-10-24 · CVE-2022-41806

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 15.1.x through 15.1.5.0 F5 BIG-IP versions 16.1.x through 16.1.3.1

Description When a BIG-IP AFM Network Address Translation policy with IPv6/IPv4 translation rules is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.

Recommendations For versions 15.1.x through 15.1.5.0, update to version 15.1.5.1 or later. For versions 16.1.x through 16.1.3.1, update to version 16.1.3.2 or later.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2022-41806

Affected Products

F5 Big-Ip

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-41806 · Security Note
• https://osv.dev/vulnerability/CVE-2022-41806 · Vendor Advisory
• https://support.f5.com/csp/article/K00721320 · Vendor Advisory
• https://t.me/cibsecurity/51846 · Telegram Post