PT-2023-7389 · F5 · Big-Ip

Published 2023-02-01 · Updated 2023-02-10 · CVE-2023-22839

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions BIG-IP versions 13.1.x BIG-IP versions 14.1.x before 14.1.5.3 BIG-IP versions 15.1.x before 15.1.8.1 BIG-IP versions 16.1.x before 16.1.3.3 BIG-IP versions 17.0.x before 17.0.0.2

Description The issue is related to the Traffic Management Microkernel (TMM) terminating when undisclosed requests are made to a virtual server with a DNS profile and Rapid Response Mode setting enabled, along with hardware SYN cookies. This can be caused by errors such as pointer dereference issues. The estimated number of potentially affected devices and details about real-world incidents are not provided.

Recommendations For BIG-IP version 13.1.x, update to a version outside of the affected range. For BIG-IP versions 14.1.x before 14.1.5.3, update to version 14.1.5.3 or later. For BIG-IP versions 15.1.x before 15.1.8.1, update to version 15.1.8.1 or later. For BIG-IP versions 16.1.x before 16.1.3.3, update to version 16.1.3.3 or later. For BIG-IP versions 17.0.x before 17.0.0.2, update to version 17.0.0.2 or later. As a temporary workaround, consider disabling the Rapid Response Mode setting in the DNS profile until a patch is available. Restrict access to the virtual server with hardware SYN cookies enabled to minimize the risk of exploitation.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2023-08426

CVE-2023-22839

Affected Products

Big-Ip

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-22839 · Security Note
• https://bdu.fstec.ru/vul/2023-08426 · Security Note
• https://osv.dev/vulnerability/CVE-2023-22839 · Vendor Advisory
• https://my.f5.com/manage/s/article/K37708118 · Vendor Advisory
• https://vuldb.com/ru/?id.219968 · Note
• https://t.me/cvenotify/43342 · Telegram Post
• https://t.me/cibsecurity/57322 · Telegram Post