Skip to content
OpenAdvisories
High · 7.5 CVE-2022-41836 EUVD-2022-45003GHSA-q5j4-wm7v-gfh4

BIG-IP Advanced WAF and ASM bd vulnerability CVE-2022-41836

Published Oct 19, 2022 · Updated May 7, 2025 · Assigned by f5

Vendor: F5 Product: BIG-IP Advanced WAF & ASM Category: Network devices

Description

When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.

Affected products

VendorProductAffectedFixed
F5 BIG-IP Advanced WAF & ASM 17.0.x – < 17.0.0.1, 16.1.x – < 16.1.3.1, 15.1.x – < 15.1.7 17.0.0.1

References