← Database

CVE-2022-23027

MEDIUM CVSS: 5.3 Published: 2022-01-25 Modified: 2026-06-17

Description

On BIG-IP versions 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, 13.1.x beginning in 13.1.3.6, 12.1.5.3-12.1.6, and 11.6.5.2, when a FastL4 profile and an HTTP, FIX, and/or hash persistence profile are configured on the same virtual server, undisclosed requests can cause the virtual server to stop processing new client connections. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected Platforms

F5 Big-Ip Global Traffic ManagerF5 Big-Ip Local Traffic ManagerF5 Big-Ip Advanced Firewall ManagerF5 Big-Ip Access Policy ManagerF5 Big-Ip Application Security ManagerF5 Big-Ip Ddos Hybrid DefenderF5 Big-Ip Application Acceleration ManagerF5 Big-Ip Domain Name SystemF5 Big-Ip Ssl OrchestratorF5 Big-Ip Analytics

Weakness Type

CWE-697, CWE-697

References