5.9

CVE-2022-28708

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2 and 15.1.x versions prior to 15.1.5.1, when a BIG-IP DNS resolver-enabled, HTTP-Explicit or SOCKS profile is configured on a virtual server, an undisclosed DNS response can cause the Traffic Management Microkernel (TMM) process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
F5 ≫ Big-ip Access Policy Manager Version 15.1.0
F5 ≫ Big-ip Access Policy Manager Version 15.1.1
F5 ≫ Big-ip Access Policy Manager Version 15.1.2
F5 ≫ Big-ip Access Policy Manager Version 15.1.3
F5 ≫ Big-ip Access Policy Manager Version 15.1.4
F5 ≫ Big-ip Access Policy Manager Version 15.1.5
F5 ≫ Big-ip Access Policy Manager Version 16.1.0
F5 ≫ Big-ip Access Policy Manager Version 16.1.1
F5 ≫ Big-ip Access Policy Manager Version 16.1.2
F5 ≫ Big-ip Analytics Version 15.1.0
F5 ≫ Big-ip Analytics Version 15.1.1
F5 ≫ Big-ip Analytics Version 15.1.2
F5 ≫ Big-ip Analytics Version 15.1.3
F5 ≫ Big-ip Analytics Version 15.1.4
F5 ≫ Big-ip Analytics Version 15.1.5
F5 ≫ Big-ip Analytics Version 16.1.0
F5 ≫ Big-ip Analytics Version 16.1.1
F5 ≫ Big-ip Analytics Version 16.1.2
F5 ≫ Big-ip Domain Name System Version 15.1.0
F5 ≫ Big-ip Domain Name System Version 15.1.1
F5 ≫ Big-ip Domain Name System Version 15.1.2
F5 ≫ Big-ip Domain Name System Version 15.1.3
F5 ≫ Big-ip Domain Name System Version 15.1.4
F5 ≫ Big-ip Domain Name System Version 15.1.5
F5 ≫ Big-ip Domain Name System Version 16.1.0
F5 ≫ Big-ip Domain Name System Version 16.1.1
F5 ≫ Big-ip Domain Name System Version 16.1.2
F5 ≫ Big-ip Fraud Protection Service Version 15.1.0
F5 ≫ Big-ip Fraud Protection Service Version 15.1.1
F5 ≫ Big-ip Fraud Protection Service Version 15.1.2
F5 ≫ Big-ip Fraud Protection Service Version 15.1.3
F5 ≫ Big-ip Fraud Protection Service Version 15.1.4
F5 ≫ Big-ip Fraud Protection Service Version 15.1.5
F5 ≫ Big-ip Fraud Protection Service Version 16.1.0
F5 ≫ Big-ip Fraud Protection Service Version 16.1.1
F5 ≫ Big-ip Fraud Protection Service Version 16.1.2
F5 ≫ Big-ip Global Traffic Manager Version 15.1.0
F5 ≫ Big-ip Global Traffic Manager Version 15.1.1
F5 ≫ Big-ip Global Traffic Manager Version 15.1.2
F5 ≫ Big-ip Global Traffic Manager Version 15.1.3
F5 ≫ Big-ip Global Traffic Manager Version 15.1.4
F5 ≫ Big-ip Global Traffic Manager Version 15.1.5
F5 ≫ Big-ip Global Traffic Manager Version 16.1.0
F5 ≫ Big-ip Global Traffic Manager Version 16.1.1
F5 ≫ Big-ip Global Traffic Manager Version 16.1.2
F5 ≫ Big-ip Link Controller Version 15.1.0
F5 ≫ Big-ip Link Controller Version 15.1.1
F5 ≫ Big-ip Link Controller Version 15.1.2
F5 ≫ Big-ip Link Controller Version 15.1.3
F5 ≫ Big-ip Link Controller Version 15.1.4
F5 ≫ Big-ip Link Controller Version 15.1.5
F5 ≫ Big-ip Link Controller Version 16.1.0
F5 ≫ Big-ip Link Controller Version 16.1.1
F5 ≫ Big-ip Link Controller Version 16.1.2
F5 ≫ Big-ip Local Traffic Manager Version 15.1.0
F5 ≫ Big-ip Local Traffic Manager Version 15.1.1
F5 ≫ Big-ip Local Traffic Manager Version 15.1.2
F5 ≫ Big-ip Local Traffic Manager Version 15.1.3
F5 ≫ Big-ip Local Traffic Manager Version 15.1.4
F5 ≫ Big-ip Local Traffic Manager Version 15.1.5
F5 ≫ Big-ip Local Traffic Manager Version 16.1.0
F5 ≫ Big-ip Local Traffic Manager Version 16.1.1
F5 ≫ Big-ip Local Traffic Manager Version 16.1.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.78% 0.522
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
F5 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://support.f5.com/csp/article/K85054496
Vendor Advisory