Skip to content
OpenAdvisories
High · 7.5 CVE-2022-41833 EUVD-2022-45000GHSA-8xq5-7xq7-g2fm

BIG-IP iRule vulnerability CVE-2022-41833

Published Oct 19, 2022 · Updated May 7, 2025 · Assigned by f5

Description

In all BIG-IP 13.1.x versions, when an iRule containing the HTTP::collect command is configured on a virtual server, undisclosed requests can cause Traffic Management Microkernel (TMM) to terminate.

Affected products

VendorProductAffectedFixed
F5 BIG-IP 13.1.0 – < 13.1.x* 16.1.x

References