CVE-2021-22975: High severity F5 BIG-IP Access Policy Manager vulnerability

Q: What is the severity of CVE-2021-22975?

The severity of CVE-2021-22975 is classified as high due to potential system downtime during large bursts of traffic.

Q: How do I fix CVE-2021-22975?

To fix CVE-2021-22975, you should upgrade to the latest software versions, which are 16.0.1.1, 15.1.2.1, or 14.1.3.1, or later.

Q: Which systems are affected by CVE-2021-22975?

CVE-2021-22975 affects F5 BIG-IP systems running versions prior to 16.0.1.1, 15.1.2.1, and 14.1.3.1.

Q: What symptoms indicate a vulnerability from CVE-2021-22975?

Symptoms of a vulnerability from CVE-2021-22975 may include sudden Traffic Management Microkernel (TMM) restarts during high traffic loads.

Q: Is there a workaround for CVE-2021-22975?

There are no specific workarounds for CVE-2021-22975; upgrading to secure versions is strongly recommended.

Published Feb 12, 2021

Updated

On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, and 14.1.x before 14.1.3.1, under some circumstances, Traffic Management Microkernel (TMM) may restart on the BIG-IP system while passing large bursts of traffic. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.

Affected Software

42 affected components

F5 BIG-IP Access Policy Manager>=14.1.0<14.1.3.1

F5 BIG-IP Access Policy Manager>=15.1.0<15.1.2.1

F5 BIG-IP Access Policy Manager>=16.0.0<16.0.1.1

F5 BIG-IP Advanced Firewall Manager>=14.1.0<14.1.3.1

F5 BIG-IP Advanced Firewall Manager>=15.1.0<15.1.2.1

F5 BIG-IP Advanced Firewall Manager>=16.0.0<16.0.1.1

F5 Big-ip Advanced Web Application Firewall>=14.1.0<14.1.3.1

F5 Big-ip Advanced Web Application Firewall>=15.1.0<15.1.2.1

F5 Big-ip Advanced Web Application Firewall>=16.0.0<16.0.1.1

F5 BIG-IP Analytics>=14.1.0<14.1.3.1

F5 BIG-IP Analytics>=15.1.0<15.1.2.1

F5 BIG-IP Analytics>=16.0.0<16.0.1.1

F5 Big-ip Application Acceleration Manager>=14.1.0<14.1.3.1

F5 Big-ip Application Acceleration Manager>=15.1.0<15.1.2.1

F5 Big-ip Application Acceleration Manager>=16.0.0<16.0.1.1

F5 BIG-IP Application Security Manager>=14.1.0<14.1.3.1

F5 BIG-IP Application Security Manager>=15.1.0<15.1.2.1

F5 BIG-IP Application Security Manager>=16.0.0<16.0.1.1

F5 Big-ip Ddos Hybrid Defender>=14.1.0<14.1.3.1

F5 Big-ip Ddos Hybrid Defender>=15.1.0<15.1.2.1

F5 Big-ip Ddos Hybrid Defender>=16.0.0<16.0.1.1

F5 Big-ip Domain Name System>=14.1.0<14.1.3.1

F5 Big-ip Domain Name System>=15.1.0<15.1.2.1

F5 Big-ip Domain Name System>=16.0.0<16.0.1.1

F5 Big-ip Fraud Protection Service>=14.1.0<14.1.3.1

F5 Big-ip Fraud Protection Service>=15.1.0<15.1.2.1

F5 Big-ip Fraud Protection Service>=16.0.0<16.0.1.1

F5 Big-ip Global Traffic Manager>=14.1.0<14.1.3.1

F5 Big-ip Global Traffic Manager>=15.1.0<15.1.2.1

F5 Big-ip Global Traffic Manager>=16.0.0<16.0.1.1

F5 Big-ip Link Controller>=14.1.0<14.1.3.1

F5 Big-ip Link Controller>=15.1.0<15.1.2.1

F5 Big-ip Link Controller>=16.0.0<16.0.1.1

F5 Big-ip Local Traffic Manager>=14.1.0<14.1.3.1

F5 Big-ip Local Traffic Manager>=15.1.0<15.1.2.1

F5 Big-ip Local Traffic Manager>=16.0.0<16.0.1.1

F5 Big-ip Policy Enforcement Manager>=14.1.0<14.1.3.1

F5 Big-ip Policy Enforcement Manager>=15.1.0<15.1.2.1

F5 Big-ip Policy Enforcement Manager>=16.0.0<16.0.1.1

F5 BIG-IP SSL Orchestrator>=14.1.0<14.1.3.1

F5 BIG-IP SSL Orchestrator>=15.1.0<15.1.2.1

F5 BIG-IP SSL Orchestrator>=16.0.0<16.0.1.1

Event History

Feb 12, 2021

CVE Published

via MITRE·04:02 PM

Data Sourced

via MITRE·04:02 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2021-22975?

The severity of CVE-2021-22975 is classified as high due to potential system downtime during large bursts of traffic.

How do I fix CVE-2021-22975?

To fix CVE-2021-22975, you should upgrade to the latest software versions, which are 16.0.1.1, 15.1.2.1, or 14.1.3.1, or later.

Which systems are affected by CVE-2021-22975?