CVE-2022-34862 - F5 Big-ip Analytics, F5 Big-ip Access Policy Manager and F5 Big-ip Domain Name System

Critical 7.5

In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when an LTM virtual server is configured to perform normalization, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected software

F5 Big-ip Analytics

F5 Big-ip Access Policy Manager

F5 Big-ip Domain Name System

F5 Big-ip Application Security Manager

F5 Big-ip Global Traffic Manager

F5 Big-ip Application Acceleration Manager

F5 Big-ip Link Controller

F5 Big-ip Local Traffic Manager

F5 Big-ip Fraud Protection Service

F5 Big-ip Advanced Firewall Manager

F5 Big-ip Policy Enforcement Manager

Reference links

Get alerted to vulnerabilities in your software

CVE alerts, vulnerability alerts, latest versions and news matched to your software stack.