CVE-2022-41787

Published: Oct 19, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS queries with DNSSEC can cause TMM to terminate.

Affected (10)

Products: F5: Big Ip Domain Name System, Big Ip Local Traffic Manager

2 products

Big Ip Domain Name System

Big Ip Local Traffic Manager

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Domain Name System	From 13.1.0 to 13.1.5.1
F5 Big Ip Domain Name System	From 14.1.0 to 14.1.5.1
F5 Big Ip Domain Name System	From 15.1.0 to 15.1.6.1
F5 Big Ip Domain Name System	From 16.1.0 to 16.1.3.1
F5 Big Ip Domain Name System	From 17.0.0 to 17.0.0.1
F5 Big Ip Local Traffic Manager	From 13.1.0 to 13.1.5.1
F5 Big Ip Local Traffic Manager	From 14.1.0 to 14.1.5.1
F5 Big Ip Local Traffic Manager	From 15.1.0 to 15.1.6.1
F5 Big Ip Local Traffic Manager	From 16.1.0 to 16.1.3.1
F5 Big Ip Local Traffic Manager	From 17.0.0 to 17.0.0.1

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

https://support.f5.com/csp/article/K70569537

Source: f5sirt@f5.com

MitigationVendor Advisory

https://support.f5.com/csp/article/K70569537

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationVendor Advisory

Timeline

No history available yet.