F5 Products Denial of Service Vulnerability

Impact

• Denial of Service

System / Technologies affected

BIG-IP (all modules)

• 16.1.0 - 16.1.2
• 15.1.0 - 15.1.5
• 14.1.0 - 14.1.4
• 13.1.0 - 13.1.4
• 12.1.0 - 12.1.6
• 11.6.1 - 11.6.5

BIG-IQ Centralized Management

• 8.0.0 - 8.1.0
• 7.0.0 - 7.1.0

BF5OS-A

• 1.0.0 - 1.0.1

BF5OS-C

• 1.3.0 - 1.3.1
• 1.2.0 - 1.2.2
• 1.1.0 - 1.1.4

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

https://support.f5.com/csp/article/K44994972

Vulnerability Identifier

• CVE-2022-25704

Source

• F5
• AusCERT

Related Link

• https://support.f5.com/csp/article/K44994972
• https://www.auscert.org.au/bulletins/ESB-2022.1417