Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-41833

BIG-IP iRule vulnerability CVE-2022-41833

Description

In all BIG-IP 13.1.x versions, when an iRule containing the HTTP::collect command is configured on a virtual server, undisclosed requests can cause Traffic Management Microkernel (TMM) to terminate.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

F5 BIG-IP

  • 17.0.0 to < 17.0.x*unaffected
  • 16.1.x to ≤ 16.1.0unaffected
  • 15.1.0 to < 15.1.x*unaffected
  • 14.1.0 to < 14.1.x*unaffected
  • 13.1.0 to < 13.1.x*affected

References