CVE-2021-22982: Buffer Overflow
On BIG-IP DNS and GTM version 13.1.x before 13.1.0.4, and all versions of 12.1.x and 11.6.x, big3d does not securely handle and parse certain payloads resulting in a buffer overflow. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-22982?
CVE-2021-22982 is classified as a critical vulnerability due to the potential for remote code execution and service disruption.
How do I fix CVE-2021-22982?
To fix CVE-2021-22982, upgrade to BIG-IP DNS and GTM version 13.1.0.4 or later, or ensure you're using secure versions of 12.1.x or 11.6.x.
What software versions are affected by CVE-2021-22982?
CVE-2021-22982 affects BIG-IP DNS and GTM versions 12.1.x, 11.6.x, and versions 13.1.x prior to 13.1.0.4.
What are the consequences of exploiting CVE-2021-22982?
Exploiting CVE-2021-22982 can lead to a buffer overflow, allowing attackers to execute arbitrary code remotely.
Is there a workaround for CVE-2021-22982?
There are no specific workarounds for CVE-2021-22982; the recommended action is to apply the provided security updates.