Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2022-36795

BIG-IP software SYN cookies vulnerability CVE-2022-36795

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
f5

Description

In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, and 14.1.x before 14.1.5.1, when an LTM TCP profile with Auto Receive Window Enabled is configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing new client connections.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

F5 BIG-IP

  • 17.0.x to < 17.0.0.1affected
  • 16.1.x to < 16.1.3.1affected
  • 15.1.x to < 15.1.7affected
  • 14.1.x to < 14.1.5.1affected
  • 13.1.0 to < 13.1.x*unaffected

References