CVE-2021-23049
First published: Tue Sep 14 2021(Updated: )
Credit: f5sirt@f5.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| F5 BIG-IP Access Policy Manager | >=15.1.0<15.1.3 | |
| F5 BIG-IP Access Policy Manager | >=16.0.0<16.0.1.2 | |
| F5 BIG-IP Advanced Firewall Manager | >=15.1.0<15.1.3 | |
| F5 BIG-IP Advanced Firewall Manager | >=16.0.0<16.0.1.2 | |
| F5 Big-ip Advanced Web Application Firewall | >=15.1.0<15.1.3 | |
| F5 Big-ip Advanced Web Application Firewall | >=16.0.0<16.0.1.2 | |
| F5 BIG-IP Analytics | >=15.1.0<15.1.3 | |
| F5 BIG-IP Analytics | >=16.0.0<16.0.1.2 | |
| F5 Big-ip Application Acceleration Manager | >=15.1.0<15.1.3 | |
| F5 Big-ip Application Acceleration Manager | >=16.0.0<16.0.1.2 | |
| F5 BIG-IP Application Security Manager | >=15.1.0<15.1.3 | |
| F5 BIG-IP Application Security Manager | >=16.0.0<16.0.1.2 | |
| F5 Big-ip Domain Name System | >=15.1.0<15.1.3 | |
| F5 Big-ip Domain Name System | >=16.0.0<16.0.1.2 | |
| F5 Big-ip Fraud Protection Service | >=15.1.0<15.1.3 | |
| F5 Big-ip Fraud Protection Service | >=16.0.0<16.0.1.2 | |
| F5 Big-ip Global Traffic Manager | >=15.1.0<15.1.3 | |
| F5 Big-ip Global Traffic Manager | >=16.0.0<16.0.1.2 | |
| F5 Big-ip Link Controller | >=15.1.0<15.1.3 | |
| F5 Big-ip Link Controller | >=16.0.0<16.0.1.2 | |
| F5 Big-ip Local Traffic Manager | >=15.1.0<15.1.3 | |
| F5 Big-ip Local Traffic Manager | >=16.0.0<16.0.1.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-23049?
CVE-2021-23049 is a vulnerability on BIG-IP version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3 that can cause an out-of-memory condition and denial-of-service.
How does CVE-2021-23049 affect F5 BIG-IP products?
CVE-2021-23049 affects F5 BIG-IP products, including Access Policy Manager, Advanced Firewall Manager, Advanced Web Application Firewall, Analytics, Application Acceleration Manager, Application Security Manager, Domain Name System, Fraud Protection Service, Global Traffic Manager, Link Controller, and Local Traffic Manager.
What is the severity of CVE-2021-23049?
CVE-2021-23049 has a severity rating of 7.5, which is considered high.
How can I mitigate the vulnerability in CVE-2021-23049?
To mitigate the vulnerability in CVE-2021-23049, upgrade to BIG-IP version 16.0.1.2 or 15.1.3, or apply the necessary patches provided by F5 Networks.
Where can I find more information about CVE-2021-23049?
You can find more information about CVE-2021-23049 on the F5 Networks support website: https://support.f5.com/csp/article/K65397301
- collector/nvd-index
- vendor/f5
- product/big-ip access policy manager
- canonical/f5 big-ip access policy manager
- product/big-ip advanced firewall manager
- canonical/f5 big-ip advanced firewall manager
- product/big-ip advanced web application firewall
- canonical/f5 big-ip advanced web application firewall
- product/big-ip analytics
- canonical/f5 big-ip analytics
- product/big-ip application acceleration manager
- canonical/f5 big-ip application acceleration manager
- product/big-ip application security manager
- canonical/f5 big-ip application security manager
- product/big-ip domain name system
- canonical/f5 big-ip domain name system
- product/big-ip fraud protection service
- canonical/f5 big-ip fraud protection service
- product/big-ip global traffic manager
- canonical/f5 big-ip global traffic manager
- product/big-ip link controller
- canonical/f5 big-ip link controller
- product/big-ip local traffic manager
- canonical/f5 big-ip local traffic manager