NetSight
high7.5

CVE-2022-27189

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all …

Impact

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when an Internet Content Adaptation Protocol (ICAP) profile is configured on a virtual server, undisclosed traffic can cause an increase in Traffic Management Microkernel (TMM) memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Affected products

VendorProductAffected versions
F5Big-Ip Access Policy Manager
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Advanced Firewall Manager
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Analytics
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Application Acceleration Manager
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Application Security Manager
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Domain Name System
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Fraud Protection Service
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Global Traffic Manager
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Link Controller
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Local Traffic Manager
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Policy Enforcement Manager
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0

Weakness classification

References