CVE-2021-23007 - F5 Big-ip Analytics, F5 Big-ip Link Controller and F5 Big-ip Access Policy Manager

Moderate 5.3

On BIG-IP versions 14.1.4 and 16.0.1.1, when the Traffic Management Microkernel (TMM) process handles certain undisclosed traffic, it may start dropping all fragmented IP traffic. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.

Affected software

F5 Big-ip Analytics

F5 Big-ip Link Controller

F5 Big-ip Access Policy Manager

F5 Big-ip Application Acceleration Manager

F5 Big-ip Ddos Hybrid Defender

F5 Big-ip Edge Gateway

F5 Big-ip Application Security Manager

F5 Big-ip Advanced Web Application Firewall

F5 Big-ip Global Traffic Manager

F5 Big-ip Policy Enforcement Manager

F5 Big-ip Domain Name System

F5 Big-ip Fraud Protection Service

F5 Big-ip Advanced Firewall Manager

F5 Big-ip Ssl Orchestrator

F5 Big-ip Local Traffic Manager

F5 Big-ip Webaccelerator

Reference links

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.