Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-55168
HistoryAug 03, 2022 - 12:00 a.m.

F5 BIG-IP LTM and APM NTLM out-of-bounds read vulnerability

2022-08-0300:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
f5 big-ip
apm ntlm
out-of-bounds read
virtual server
buffer over-reads
system memory
security vulnerability

EPSS

0.001

Percentile

28.4%

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. An out-of-bounds read vulnerability exists in F5 BIG-IP LTM and APM NTLM, when LTM health check probes or APM single sign-on are configured on a virtual server and NTLM challenge-response is used. undisclosed traffic could result in buffer over-reads, which could be exploited by an attacker to leak arbitrary system memory to the server.

EPSS

0.001

Percentile

28.4%

Related for CNVD-2022-55168