Skip to content
OpenAdvisories
Medium · 4.9 CVE-2022-41694 EUVD-2022-44879GHSA-pvwc-79jh-rc76

BIG-IP and BIG-IQ mcpd vulnerability CVE-2022-41694

Published Oct 19, 2022 · Updated May 8, 2025 · Assigned by f5

Description

In BIG-IP versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, and BIG-IQ versions 8.x before 8.2.0.1 and all versions of 7.x, when an SSL key is imported on a BIG-IP or BIG-IQ system, undisclosed input can cause MCPD to terminate.

Affected products

VendorProductAffectedFixed
F5 BIG-IP 16.1.x – < 16.1.3, 15.1.x – < 15.1.6.1, 14.1.x – < 14.1.5, 13.1.0 – < 13.1.x* 16.1.3
F5 BIG-IQ 8.x – < 8.2.0.1, 7.1.0 – < 7.1.x* 8.2.0.1

References