CVE-2022-23010

{"id": "CVE-2022-23010", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2022-01-25T20:15:09.093", "references": [{"url": "https://support.f5.com/csp/article/K34360320", "tags": ["Vendor Advisory"], "source": "f5sirt@f5.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-404"}]}, {"type": "Secondary", "source": "f5sirt@f5.com", "description": [{"lang": "en", "value": "CWE-404"}]}], "descriptions": [{"lang": "en", "value": "On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a FastL4 profile and an HTTP profile are configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated."}, {"lang": "es", "value": "En BIG-IP versiones 16.x anteriores a 16.1.0, 15.1.x anteriores a 15.1.4.1, 14.1.x anteriores a 14.1.4.4 y todas las versiones de 13.1.x, 12.1.x y 11.6.x, cuando es configurado un perfil FastL4 y un perfil HTTP en un servidor virtual, las peticiones no reveladas pueden causar un aumento en el uso de recursos de memoria. Nota: Las versiones de software que han alcanzado el Fin de Soporte T\u00e9cnico (EoTS) no son evaluadas"}], "lastModified": "2022-02-01T17:21:07.330", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5761ADC0-5F98-4727-B2DE-9299C9CE6BD8", "versionEndIncluding": "11.6.5", "versionStartIncluding": "11.6.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE2F2CB2-BE96-4DC8-B336-1E9A318B4604", "versionEndIncluding": "12.1.6", "versionStartIncluding": "12.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50288008-B90F-4882-80AD-2C70A1F1E2DD", "versionEndIncluding": "13.1.4", "versionStartIncluding": "13.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "390A02DB-90FA-48DF-834E-1FD63ADFF995", "versionEndExcluding": "14.1.4.4", "versionStartIncluding": "14.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7184A61B-7319-41BF-AD95-ECA130D59B4F", "versionEndExcluding": "15.1.4.1", "versionStartIncluding": "15.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FFB4E22B-105A-48A4-B5C3-3FF5D03A9947", "versionEndExcluding": "16.1.0", "versionStartIncluding": "16.0.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69450774-EFFB-4EB1-8321-2197CE379B49", "versionEndIncluding": "11.6.5", "versionStartIncluding": "11.6.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E32CBE0-BFDC-4DCB-A365-2F3C4D680446", "versionEndIncluding": "12.1.6", "versionStartIncluding": "12.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C37ABF73-E093-498B-99F3-11D5A3908C7F", "versionEndIncluding": "13.1.4", "versionStartIncluding": "13.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC3B3C8F-1D09-408E-BA0D-CB801B48FCF0", "versionEndExcluding": "14.1.4.4", "versionStartIncluding": "14.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "294B0310-63D7-41F0-832D-77942B25520D", "versionEndExcluding": "15.1.4.1", "versionStartIncluding": "15.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75DD866A-FE32-44C9-93D0-AF21E30230A0", "versionEndExcluding": "16.1.0", "versionStartIncluding": "16.0.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E64E043B-3418-45C8-B2BB-F1611E7525A3", "versionEndIncluding": "11.6.5", "versionStartIncluding": "11.6.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "18666B67-A6EA-402B-926E-96348AB82831", "versionEndIncluding": "12.1.6", "versionStartIncluding": "12.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "18F2AC19-1085-48C3-B270-DD3E17A7870D", "versionEndIncluding": "13.1.4", "versionStartIncluding": "13.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3BC82656-7EA2-4690-A9ED-980D18949358", "versionEndExcluding": "14.1.4.4", "versionStartIncluding": "14.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "79BB6053-F55E-48B2-A6C1-16B63FB22160", "versionEndExcluding": "15.1.4.1", "versionStartIncluding": "15.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87F34592-8AD7-4C61-88FD-BBA0C9C3C921", "versionEndExcluding": "16.1.0", "versionStartIncluding": "16.0.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58A03238-74CE-4575-856E-502AEC669489", "versionEndIncluding": "11.6.5", "versionStartIncluding": "11.6.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8AF5B8C5-98F2-45B5-A877-C3666E3D6876", "versionEndIncluding": "12.1.6", "versionStartIncluding": "12.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EDDC86D0-B9D6-42AE-959E-CC40C6F275EE", "versionEndIncluding": "13.1.4", "versionStartIncluding": "13.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61EE2BE3-CD2C-4295-A382-B76D48760854", "versionEndExcluding": "14.1.4.4", "versionStartIncluding": "14.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3CF6E97-F199-4E20-BD0E-1DA03CE7EC95", "versionEndExcluding": "15.1.4.1", "versionStartIncluding": "15.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7BBDB4C-3210-42AD-8276-BAA30B8C25EC", "versionEndExcluding": "16.1.0", "versionStartIncluding": "16.0.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0FEC23E9-FF6F-4019-8C85-4993663F7276", "versionEndIncluding": "11.6.5", "versionStartIncluding": "11.6.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1849279E-9FB1-4D6A-8386-337F7DF151DF", "versionEndIncluding": "12.1.6", "versionStartIncluding": "12.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D17DCE22-99F8-422C-A414-86CFA78BA425", "versionEndIncluding": "13.1.4", "versionStartIncluding": "13.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "681E201F-98BE-479E-964B-7B5F9913ACAA", "versionEndExcluding": "14.1.4.4", "versionStartIncluding": "14.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C890936B-54FE-46A9-8E1E-CB06B1777F93", "versionEndExcluding": "15.1.4.1", "versionStartIncluding": "15.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85428C51-3AD9-4704-A21E-229A0846FFA7", "versionEndExcluding": "16.1.0", "versionStartIncluding": "16.0.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "55BFE22B-204D-4DD7-8EB3-8AC068EEE84C", "versionEndIncluding": "11.6.5", "versionStartIncluding": "11.6.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F489E5B1-1EC4-4E45-8EE6-6A4FCD0F386F", "versionEndIncluding": "12.1.6", "versionStartIncluding": "12.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F82E9A35-A3E2-4915-BE23-B321C18BE6C3", "versionEndIncluding": "13.1.4", "versionStartIncluding": "13.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5C35120-3778-4B39-8FC7-617DB3563A3A", "versionEndExcluding": "14.1.4.4", "versionStartIncluding": "14.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B13159A8-72AF-46CE-B7CC-58604EA3F933", "versionEndExcluding": "15.1.4.1", "versionStartIncluding": "15.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B482DB60-D251-4478-83C9-073EE0759BF4", "versionEndExcluding": "16.1.0", "versionStartIncluding": "16.0.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A72C0B5-2AD5-4CA2-8F1A-C389E5578B20", "versionEndIncluding": "11.6.5", "versionStartIncluding": "11.6.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01C01794-36BD-4783-B962-07000FCE4788", "versionEndIncluding": "12.1.6", "versionStartIncluding": "12.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B486BC4-2258-42FC-834E-22958ACFCA13", "versionEndIncluding": "13.1.4", "versionStartIncluding": "13.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BDF71400-871F-4A3F-A7AA-5536205C993D", "versionEndExcluding": "14.1.4.4", "versionStartIncluding": "14.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8EF2D150-6031-4B94-9C98-36FCED6639D5", "versionEndExcluding": "15.1.4.1", "versionStartIncluding": "15.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8CE83140-4BCD-4E69-A837-7FD8141FCD3C", "versionEndExcluding": "16.1.0", "versionStartIncluding": "16.0.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2B7A18A-A9D6-42E5-89F7-F12D1E2866E3", "versionEndIncluding": "11.6.5", "versionStartIncluding": "11.6.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5ED5A4F4-9FFF-43D0-B17D-838D6CEDDF04", "versionEndIncluding": "12.1.6", "versionStartIncluding": "12.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3FCEA7BA-FBAB-4D94-86D9-51B7F8E4C0A1", "versionEndIncluding": "13.1.4", "versionStartIncluding": "13.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E9C07D8-11F2-45BB-91EE-A2E2864BD08C", "versionEndExcluding": "14.1.4.4", "versionStartIncluding": "14.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF8311B4-2236-42BC-8B89-790309BD4E43", "versionEndExcluding": "15.1.4.1", "versionStartIncluding": "15.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A701279F-6D0E-4282-AB53-B65F199BCDE3", "versionEndExcluding": "16.1.0", "versionStartIncluding": "16.0.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1F09706-85BC-43BE-8C4C-91E566258777", "versionEndIncluding": "11.6.5", "versionStartIncluding": "11.6.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "16234A51-9C86-484A-B8D5-6EFB838CB564", "versionEndIncluding": "12.1.6", "versionStartIncluding": "12.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ADE1E0A6-DE70-4D46-B493-671E23EEA32D", "versionEndIncluding": "13.1.4", "versionStartIncluding": "13.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AAC81C56-0F6B-4A8C-8A4B-740071359097", "versionEndExcluding": "14.1.4.4", "versionStartIncluding": "14.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C710F61F-A76C-4DED-9741-51E216975267", "versionEndExcluding": "15.1.4.1", "versionStartIncluding": "15.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB263BCB-FDC0-4856-AD2D-1D4532352115", "versionEndExcluding": "16.1.0", "versionStartIncluding": "16.0.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A81BB4CC-CA19-4C95-9F70-60D393B2AE50", "versionEndIncluding": "11.6.5", "versionStartIncluding": "11.6.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "61189D3B-8BF1-47A7-B5AC-A75E44D6BD5F", "versionEndIncluding": "12.1.6", "versionStartIncluding": "12.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "228F7E70-F93D-40BD-9C33-2A51CB6B931F", "versionEndIncluding": "13.1.4", "versionStartIncluding": "13.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5FE70B9E-1165-44C9-9DD9-585A0C09FD17", "versionEndExcluding": "14.1.4.4", "versionStartIncluding": "14.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8F6E52BA-F433-46D4-A007-161F6BCD9940", "versionEndExcluding": "15.1.4.1", "versionStartIncluding": "15.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "34E7B881-9DAF-4B1A-8EF2-7277C4DFDEBC", "versionEndExcluding": "16.1.0", "versionStartIncluding": "16.0.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E971DDD5-7F8D-42A8-8738-052B9A3395FB", "versionEndIncluding": "11.6.5", "versionStartIncluding": "11.6.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9FBA5CDC-1989-4971-BD1B-F14E801F5017", "versionEndIncluding": "12.1.6", "versionStartIncluding": "12.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F4574B7D-DFAF-4527-8E19-2E37650A1494", "versionEndIncluding": "13.1.4", "versionStartIncluding": "13.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "08C77CC7-E1C2-476D-A982-8B3D4457AD70", "versionEndExcluding": "14.1.4.4", "versionStartIncluding": "14.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B10E2A03-4553-4669-BEBF-ACBBFB2C92B0", "versionEndExcluding": "15.1.4.1", "versionStartIncluding": "15.1.0"}, {"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5E7D266-635F-43C6-81B5-160C2E6A7686", "versionEndExcluding": "16.1.0", "versionStartIncluding": "16.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "f5sirt@f5.com"}