K93504311 : TMM vulnerability CVE-2022-34655

Security Advisory Description

When an iRule containing the HTTP::payload command is configured on a virtual server, undisclosed traffic can cause Traffic Management Microkernel (TMM) to terminate. (CVE-2022-34655)

Impact

Traffic is disrupted while the TMM process restarts. This vulnerability allows a remote unauthenticated attacker to cause a denial-of-service (DoS) on the BIG-IP system while a failover occurs or TMM restarts. There is no control plane exposure; this is a data plane issue only.