Skip to content
OpenAdvisories
High · 7.5 CVE-2022-35272 EUVD-2022-38163GHSA-89h3-qg46-3mw9

BIG-IP HTTP MRF vulnerability CVE-2022-35272

Published Aug 4, 2022 · Updated Sep 17, 2024 · Assigned by f5

Description

In BIG-IP Versions 17.0.x before 17.0.0.1 and 16.1.x before 16.1.3.1, when source-port preserve-strict is configured on an HTTP Message Routing Framework (MRF) virtual server, undisclosed traffic may cause the Traffic Management Microkernel (TMM) to produce a core file and the connection to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products

VendorProductAffectedFixed
F5 BIG-IP 16.1.x – < 16.1.3.1, 17.0.x – < 17.0.0.1 16.1.3.1

References