CVE-2022-41691

Summary

When a BIG-IP Advanced WAF/ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.

Affected Software

VendorProductVersion RangeStatus
F5BIG-IP Advanced WAF & ASM17.0.0 < 17.0.x*unaffected
F5BIG-IP Advanced WAF & ASM16.1.x <= 16.1.0unaffected
F5BIG-IP Advanced WAF & ASM15.1.0 < 15.1.x*unaffected
F5BIG-IP Advanced WAF & ASM14.1.x < 14.1.5.2affected
F5BIG-IP Advanced WAF & ASM13.1.0 < 13.1.x*unaffected

Weaknesses

  • CWE-763: CWE-763 Release of Invalid Pointer or Reference

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References