PT-2022-15787

CVE-2022-23019

·

Published

2022-01-25

·

Updated

2022-02-01

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions BIG-IP versions 12.1.x through 16.1.x before 16.1.2 BIG-IP versions 13.1.x BIG-IP versions 14.1.x before 14.1.4.4 BIG-IP versions 15.1.x before 15.1.4.1
Description When a message routing type virtual server is configured with both Diameter Session and Router Profiles, undisclosed traffic can cause an increase in memory resource utilization.
Recommendations For BIG-IP versions 12.1.x, consider upgrading to a version that is still supported to mitigate the risk. For BIG-IP versions 13.1.x, consider upgrading to a version that is still supported to mitigate the risk. For BIG-IP versions 14.1.x before 14.1.4.4, update to version 14.1.4.4 or later. For BIG-IP versions 15.1.x before 15.1.4.1, update to version 15.1.4.1 or later. For BIG-IP versions 16.1.x before 16.1.2, update to version 16.1.2 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾