VYPR
Unrated severityNVD Advisory· Published Aug 4, 2022· Updated Sep 16, 2024

BIG-IP TLS 1.3 iRule vulnerability CVE-2022-34651

CVE-2022-34651

Description

In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, when an LTM Client or Server SSL profile with TLS 1.3 enabled is configured on a virtual server, along with an iRule that calls HTTP::respond, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

2
  • F5, Inc./Big IPllm-fuzzy2 versions
    >=16.1 <16.1.3.1, >=15.1 <15.1.6.1+ 1 more
    • (no CPE)range: >=16.1 <16.1.3.1, >=15.1 <15.1.6.1
    • (no CPE)range: 15.1.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.