Lucene search

K
f5F5F5:K90024104
HistoryAug 03, 2022 - 12:00 a.m.

K90024104 : BIG-IP HTTP MRF vulnerability CVE-2022-35272

2022-08-0300:00:00
my.f5.com
22
big-ip
http
mrf
vulnerability
cve-2022-35272
traffic management
tmm
denial-of-service
dos

AI Score

5.7

Confidence

High

EPSS

0

Percentile

12.6%

Security Advisory Description

When source-port preserve-strict is configured on an HTTP Message Routing Framework (MRF) virtual server, undisclosed traffic may cause the Traffic Management Microkernel (TMM) to produce a core file and the connection to terminate. (CVE-2022-35272)

Impact

Traffic is disrupted while the TMM process restarts. This vulnerability allows a local attacker to cause a denial-of-service (DoS) on the BIG-IP system.

AI Score

5.7

Confidence

High

EPSS

0

Percentile

12.6%