CVE-2021-23035

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
14/09/2021
Last modified:
27/09/2021

Description

On BIG-IP 14.1.x before 14.1.4.4, when an HTTP profile is configured on a virtual server, after a specific sequence of packets, chunked responses can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* 14.1.0 (including) 14.1.4.4 (including)
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* 14.1.0 (including) 14.1.4.4 (including)
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* 14.1.0 (including) 14.1.4.4 (including)
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* 14.1.0 (including) 14.1.4.4 (including)
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* 14.1.0 (including) 14.1.4.4 (including)
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* 14.1.0 (including) 14.1.4.4 (including)
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* 14.1.0 (including) 14.1.4.4 (including)
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* 14.1.0 (including) 14.1.4.4 (including)
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* 14.1.0 (including) 14.1.4.4 (including)
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* 14.1.0 (including) 14.1.4.4 (including)
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* 14.1.0 (including) 14.1.4.4 (including)


References to Advisories, Solutions, and Tools