imPC@ndo IT

Tracker / CVE-2022-29479

CVE-2022-29479

Medium 5.3

On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Management all versions of 8.x and 7.x, when an IPv6 self IP address is configured and the ipv6.strictcompliance database key is enabled (disabled by default) on a BIG-IP system, undisclosed packets may cause decreased performance. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Affected products and versions

f5 big-ip_access_policy_manager
f5 big-ip_advanced_firewall_manager
f5 big-ip_analytics
f5 big-ip_application_acceleration_manager
f5 big-ip_application_security_manager
f5 big-ip_domain_name_system
f5 big-ip_fraud_protection_service
f5 big-ip_global_traffic_manager
f5 big-ip_link_controller
f5 big-ip_local_traffic_manager
f5 big-ip_policy_enforcement_manager
f5 big-iq_centralized_management

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References