Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-34655

TMM vulnerability CVE-2022-34655

Description

In BIG-IP Versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when an iRule containing the HTTP::payload command is configured on a virtual server, undisclosed traffic can cause Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

F5 BIG-IP

  • 13.1.0 to < 13.1.x*unaffected
  • 14.1.x to < 14.1.5affected
  • 15.1.x to < 15.1.6.1affected
  • 16.1.0 to < 16.1.x*unaffected
  • 17.0.0 to < 17.0.x*unaffected
  • 16.0.x to < 16.0.1.1affected

References