← Database

CVE-2023-22302

MEDIUM CVSS: 5.9 Published: 2023-02-01 Modified: 2026-06-17

Description

In BIG-IP versions 17.0.x before 17.0.0.2, and 16.1.x beginning in 16.1.2.2 to before 16.1.3.3, when an HTTP profile is configured on a virtual server and conditions beyond the attacker’s control exist on the target pool member, undisclosed requests sent to the BIG-IP system can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected Platforms

F5 Big-Ip Local Traffic ManagerF5 Big-Ip Advanced Firewall ManagerF5 Big-Ip Access Policy ManagerF5 Big-Ip Application Security ManagerF5 Big-Ip Ddos Hybrid DefenderF5 Big-Ip Application Acceleration ManagerF5 Big-Ip Domain Name SystemF5 Big-Ip Ssl OrchestratorF5 Big-Ip AnalyticsF5 Big-Ip Link Controller

Weakness Type

CWE-772, CWE-772

References