CVE-2021-23034: Input Validation

Q: What is the severity of CVE-2021-23034?

The severity of CVE-2021-23034 is considered high due to the potential for the Traffic Management Microkernel process to terminate.

Q: How do I fix CVE-2021-23034?

To mitigate CVE-2021-23034, upgrade to F5 BIG-IP version 15.1.3.1 or later, or 16.1.0 or later.

Q: What products are affected by CVE-2021-23034?

Affected products include various F5 BIG-IP modules such as Access Policy Manager and Local Traffic Manager across specific versions.

Q: What happens if CVE-2021-23034 is exploited?

If exploited, CVE-2021-23034 can cause the termination of the TMM process, which may disrupt service availability.

Q: Is CVE-2021-23034 being actively exploited in the wild?

As of now, there are no confirmed reports suggesting that CVE-2021-23034 is being actively exploited in the wild.

Published Sep 14, 2021

Updated

On BIG-IP version 16.x before 16.1.0 and 15.1.x before 15.1.3.1, when a DNS profile using a DNS cache resolver is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected Software

22 affected components

F5 BIG-IP Access Policy Manager>=15.1.0<15.1.3.1

F5 BIG-IP Access Policy Manager>=16.0.0<16.1.0

F5 BIG-IP Advanced Firewall Manager>=15.1.0<15.1.3.1

F5 BIG-IP Advanced Firewall Manager>=16.0.0<16.1.0

F5 BIG-IP Analytics>=15.1.0<15.1.3.1

F5 BIG-IP Analytics>=16.0.0<16.1.0

F5 Big-ip Application Acceleration Manager>=15.1.0<15.1.3.1

F5 Big-ip Application Acceleration Manager>=16.0.0<16.1.0

F5 BIG-IP Application Security Manager>=15.1.0<15.1.3.1

F5 BIG-IP Application Security Manager>=16.0.0<16.1.0

F5 Big-ip Domain Name System>=15.1.0<15.1.3.1

F5 Big-ip Domain Name System>=16.0.0<16.1.0

F5 Big-ip Fraud Protection Service>=15.1.0<15.1.3.1

F5 Big-ip Fraud Protection Service>=16.0.0<16.1.0

F5 Big-ip Global Traffic Manager>=15.1.0<15.1.3.1

F5 Big-ip Global Traffic Manager>=16.0.0<16.1.0

F5 Big-ip Link Controller>=15.1.0<15.1.3.1

F5 Big-ip Link Controller>=16.0.0<16.1.0

F5 Big-ip Local Traffic Manager>=15.1.0<15.1.3.1

F5 Big-ip Local Traffic Manager>=16.0.0<16.1.0

F5 Big-ip Policy Enforcement Manager>=15.1.0<15.1.3.1

F5 Big-ip Policy Enforcement Manager>=16.0.0<16.1.0

Event History

Sep 14, 2021

CVE Published

via MITRE·05:58 PM

Data Sourced

via MITRE·05:58 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2021-23034?

The severity of CVE-2021-23034 is considered high due to the potential for the Traffic Management Microkernel process to terminate.

How do I fix CVE-2021-23034?

To mitigate CVE-2021-23034, upgrade to F5 BIG-IP version 15.1.3.1 or later, or 16.1.0 or later.

What products are affected by CVE-2021-23034?