NetSight
medium5.3

CVE-2022-29479

On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and …

Impact

On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Management all versions of 8.x and 7.x, when an IPv6 self IP address is configured and the ipv6.strictcompliance database key is enabled (disabled by default) on a BIG-IP system, undisclosed packets may cause decreased performance. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Affected products

VendorProductAffected versions
F5Big-Ip Access Policy Manager
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Advanced Firewall Manager
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Analytics
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Application Acceleration Manager
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Application Security Manager
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Domain Name System
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Fraud Protection Service
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Global Traffic Manager
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Link Controller
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Local Traffic Manager
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Ip Policy Enforcement Manager
Versions 11.6.1, 11.6.2, 11.6.3, 11.6.4, 11.6.5, 12.1.0
F5Big-Iq Centralized Management
Versions 7.0.0, 7.1.0, 8.0.0, 8.1.0, 8.2.0

Weakness classification

References