Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-35272

BIG-IP HTTP MRF vulnerability CVE-2022-35272

Description

In BIG-IP Versions 17.0.x before 17.0.0.1 and 16.1.x before 16.1.3.1, when source-port preserve-strict is configured on an HTTP Message Routing Framework (MRF) virtual server, undisclosed traffic may cause the Traffic Management Microkernel (TMM) to produce a core file and the connection to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

F5 BIG-IP

  • 13.1.0 to < 13.1.x*unaffected
  • 14.1.0 to < 14.1.x*unaffected
  • 15.1.0 to < 15.1.x*unaffected
  • 16.1.x to < 16.1.3.1affected
  • 17.0.x to < 17.0.0.1affected

References