NetSight
IP …
high7.5

CVE-2021-22977

On BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3, cooperation between malicious HTTP client code and a malicious server may cause TMM to restart and generat…

Impact

On BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3, cooperation between malicious HTTP client code and a malicious server may cause TMM to restart and generate a core file. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.

Affected products

VendorProductAffected versions
F5Big-Ip Access Policy Manager
from 14.1.0 before 14.1.3.1
from 16.0.0 before 16.0.1.1
F5Big-Ip Advanced Firewall Manager
from 14.1.0 before 14.1.3.1
from 16.0.0 before 16.0.1.1
F5Big-Ip Advanced Web Application Firewall
from 14.1.0 before 14.1.3.1
from 16.0.0 before 16.0.1.1
F5Big-Ip Analytics
from 14.1.0 before 14.1.3.1
from 16.0.0 before 16.0.1.1
F5Big-Ip Application Acceleration Manager
from 14.1.0 before 14.1.3.1
from 16.0.0 before 16.0.1.1
F5Big-Ip Application Security Manager
from 14.1.0 before 14.1.3.1
from 16.0.0 before 16.0.1.1
F5Big-Ip Ddos Hybrid Defender
from 14.1.0 before 14.1.3.1
from 16.0.0 before 16.0.1.1
F5Big-Ip Domain Name System
from 14.1.0 before 14.1.3.1
from 16.0.0 before 16.0.1.1
F5Big-Ip Fraud Protection Service
from 14.1.0 before 14.1.3.1
from 16.0.0 before 16.0.1.1
F5Big-Ip Global Traffic Manager
from 14.1.0 before 14.1.3.1
from 16.0.0 before 16.0.1.1
F5Big-Ip Link Controller
from 14.1.0 before 14.1.3.1
from 16.0.0 before 16.0.1.1
F5Big-Ip Local Traffic Manager
from 14.1.0 before 14.1.3.1
from 16.0.0 before 16.0.1.1

References