Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2022-34844

BIG-IP and BIG-IQ AWS vulnerability CVE-2022-34844

Description

In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, and all versions of BIG-IQ 8.x, when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) driver is used with BIG-IP or BIG-IQ on Amazon Web Services (AWS) systems, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Successful exploitation relies on conditions outside of the attacker's control. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

F5 BIG-IP

  • 13.1.0 to < 13.1.x*unaffected
  • 14.1.0 to < 14.1.x*unaffected
  • 15.1.x to < 15.1.6.1affected
  • 16.1.x to < 16.1.3.1affected
  • 17.0.0 to < 17.0.x*unaffected

F5 BIG-IQ Centralized Management

  • 7.0.0 to < 7.x*unaffected
  • 8.0.0 to < 8.x*affected

References