CVE-2022-41787

Published: Oct 19, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS queries with DNSSEC can cause TMM to terminate.

Affected (10)

Products: F5: Big Ip Domain Name System, Big Ip Local Traffic Manager

2 products

Big Ip Domain Name System

Big Ip Local Traffic Manager

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Domain Name System	13.1.0 ≤ version < 13.1.5.1
F5 Big Ip Domain Name System	14.1.0 ≤ version < 14.1.5.1
F5 Big Ip Domain Name System	15.1.0 ≤ version < 15.1.6.1
F5 Big Ip Domain Name System	16.1.0 ≤ version < 16.1.3.1
F5 Big Ip Domain Name System	17.0.0 ≤ version < 17.0.0.1
F5 Big Ip Local Traffic Manager	13.1.0 ≤ version < 13.1.5.1
F5 Big Ip Local Traffic Manager	14.1.0 ≤ version < 14.1.5.1
F5 Big Ip Local Traffic Manager	15.1.0 ≤ version < 15.1.6.1
F5 Big Ip Local Traffic Manager	16.1.0 ≤ version < 16.1.3.1
F5 Big Ip Local Traffic Manager	17.0.0 ≤ version < 17.0.0.1

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

https://support.f5.com/csp/article/K70569537

Source: f5sirt@f5.com

MitigationVendor Advisory

https://support.f5.com/csp/article/K70569537

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationVendor Advisory

Timeline

No history available yet.