Skip to content
fr Sign in
7.5 High

CVE-2022-33203 In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when a BIG-IP APM access…

Description

In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when a BIG-IP APM access policy with Service Connect agent is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products and versions

Product Affected versions Fixed in
BIG-IP APM 17.0 earliest → < 17.0.0 17.0.0
BIG-IP APM 16.1 16.1.x → < 16.1.3 16.1.3
BIG-IP APM 15.1 15.1.x → < 15.1.6.1 15.1.6.1
BIG-IP APM 14.1 14.1.x → < 14.1.5 14.1.5
BIG-IP APM 13.1 earliest → < 13.1.0 13.1.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of BIG-IP APM

The 12 CVEs of BIG-IP APM →
CVE-2022-35245 In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5.1, when a BIG-IP APM… 7.5 High CVE-2022-31473 In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated… 6.8 Medium CVE-2022-29263 On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to… 7.8 High CVE-2022-28714 On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to… 7.3 High
Track this CVE