Skip to content
OpenAdvisories
High · 7.5 CVE-2022-41806 EUVD-2022-44974GHSA-xqp8-9mv7-5h3c

BIG-IP AFM NAT64 Policy Vulnerability CVE-2022-41806

Published Oct 19, 2022 · Updated May 8, 2025 · Assigned by f5

Description

In versions 16.1.x before 16.1.3.2 and 15.1.x before 15.1.5.1, when BIG-IP AFM Network Address Translation policy with IPv6/IPv4 translation rules is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.

Affected products

VendorProductAffectedFixed
F5 BIG-IP AFM 16.1.x – < 16.1.3.2, 15.1.x – < 15.1.5.1 16.1.3.2

References