CVE-2021-22985: High severity F5 BIG-IP Application Security Manager vulnerability

Q: What is the severity of CVE-2021-22985?

CVE-2021-22985 is rated as a medium severity vulnerability due to its potential for causing DoS attacks.

Q: How do I fix CVE-2021-22985?

To fix CVE-2021-22985, upgrade to BIG-IP APM version 16.0.1.1 or later.

Q: Who is affected by CVE-2021-22985?

CVE-2021-22985 affects users on BIG-IP APM versions prior to 16.0.1.1 within specific version ranges.

Q: What is the impact of CVE-2021-22985?

The impact of CVE-2021-22985 includes excessive memory consumption by TMM, potentially allowing a DoS attack.

Q: Is there a workaround for CVE-2021-22985?

There is no official workaround for CVE-2021-22985; an upgrade to the patched version is required.

Published Feb 12, 2021

Updated

On BIG-IP APM version 16.0.x before 16.0.1.1, under certain conditions, when processing VPN traffic with APM, TMM consumes excessive memory. A malicious, authenticated VPN user may abuse this to perform a DoS attack against the APM. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.

Affected Software

6 affected components

F5 BIG-IP Application Security Manager>=11.6.1<11.6.5.2

F5 BIG-IP Application Security Manager>=12.1.0<12.1.5.3

F5 BIG-IP Application Security Manager>=13.1.0<13.1.3.6

F5 BIG-IP Application Security Manager>=14.1.0<14.1.2.8

F5 BIG-IP Application Security Manager>=15.1.0<15.1.2

F5 BIG-IP Application Security Manager>=16.0.0<16.0.1.1

Event History

Feb 12, 2021

CVE Published

via MITRE·05:48 PM

Data Sourced

via MITRE·05:48 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2021-22985?

CVE-2021-22985 is rated as a medium severity vulnerability due to its potential for causing DoS attacks.

How do I fix CVE-2021-22985?

To fix CVE-2021-22985, upgrade to BIG-IP APM version 16.0.1.1 or later.

Who is affected by CVE-2021-22985?