CVE-2023-22839

Published: Feb 1, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all version of 13.1.x, when a DNS profile with the Rapid Response Mode setting enabled is configured on a virtual server with hardware SYN cookies enabled, undisclosed requests cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected (42)

34 products

Big Ip Domain Name System

Big Ip Local Traffic Manager

Big Ip 10000s Firmware

Big Ip 10200v Firmware

Big Ip 10200v Ssl Firmware

Big Ip 12000 Firmware

Big Ip 5000s Firmware

Big Ip 5200v Firmware

Big Ip 5200v Ssl Firmware

Big Ip 7000s Firmware

Big Ip 7200v Firmware

Big Ip 7200v Ssl Firmware

Big Ip I10600 Firmware

Big Ip I10800 Firmware

Big Ip I11600 Firmware

Big Ip I11800 Firmware

Big Ip I15600 Firmware

Big Ip I15800 Firmware

Big Ip I5600 Firmware

Big Ip I5800 Firmware

Big Ip I7600 Firmware

Big Ip I7800 Firmware

Viprion B2100 Firmware

Viprion B2150 Firmware

Viprion B2250 Firmware

Viprion B4300 Firmware

Viprion B4450 Firmware

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
F5 Big Ip Domain Name System	From 13.1.0 to 13.1.5
F5 Big Ip Domain Name System	From 14.1.0 to 14.1.5.3
F5 Big Ip Domain Name System	From 15.1.0 to 15.1.7
F5 Big Ip Domain Name System	From 16.1.0 to 16.1.3.3
F5 Big Ip Domain Name System	From 17.0.0 to 17.0.0.2
F5 Big Ip Local Traffic Manager	From 13.1.0 to 13.1.5
F5 Big Ip Local Traffic Manager	From 14.1.0 to 14.1.5.3
F5 Big Ip Local Traffic Manager	From 15.1.0 to 15.1.7
F5 Big Ip Local Traffic Manager	From 16.1.0 to 16.1.3.3
F5 Big Ip Local Traffic Manager	From 17.0.0 to 17.0.0.2

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip 10000s Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip 10000s	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip 10200v Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip 10200v	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip 10200v Ssl Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip 10200v Ssl	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip 12000 Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip 12000	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip 5000s Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip 5000s	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip 5200v Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip 5200v	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip 5200v Ssl Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip 5200v Ssl	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip 7000s Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip 7000s	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip 7200v Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip 7200v	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip 7200v Ssl Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip 7200v Ssl	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip I10600 Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip I10600	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip I10800 Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip I10800	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip I11600 Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip I11600	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip I11800 Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip I11800	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip I15600 Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip I15600	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip I15800 Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip I15800	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip I5600 Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip I5600	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip I5800 Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip I5800	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip I7600 Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip I7600	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Big Ip I7800 Firmware	All versions

Running on/with	Platform Versions
F5 Big Ip I7800	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 R10600 Firmware	All versions

Running on/with	Platform Versions
F5 R10600	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 R10800 Firmware	All versions

Running on/with	Platform Versions
F5 R10800	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 R10900 Firmware	All versions

Running on/with	Platform Versions
F5 R10900	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 R5600 Firmware	All versions

Running on/with	Platform Versions
F5 R5600	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 R5800 Firmware	All versions

Running on/with	Platform Versions
F5 R5800	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 R5900 Firmware	All versions

Running on/with	Platform Versions
F5 R5900	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Velos Bx110 Firmware	All versions

Running on/with	Platform Versions
F5 Velos Bx110	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Viprion B2100 Firmware	All versions

Running on/with	Platform Versions
F5 Viprion B2100	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Viprion B2150 Firmware	All versions

Running on/with	Platform Versions
F5 Viprion B2150	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Viprion B2250 Firmware	All versions

Running on/with	Platform Versions
F5 Viprion B2250	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Viprion B4300 Firmware	All versions

Running on/with	Platform Versions
F5 Viprion B4300	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
F5 Viprion B4450 Firmware	All versions

Running on/with	Platform Versions
F5 Viprion B4450	All versions

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

https://my.f5.com/manage/s/article/K37708118

Source: f5sirt@f5.com

Vendor Advisory

https://my.f5.com/manage/s/article/K37708118

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.