CVE-2022-28708: Input Validation
Published May 5, 2022
·Updated
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2 and 15.1.x versions prior to 15.1.5.1, when a BIG-IP DNS resolver-enabled, HTTP-Explicit or SOCKS profile is configured on a virtual server, an undisclosed DNS response can cause the Traffic Management Microkernel (TMM) process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Affected Software
99 affected components
F5 BIG-IP Access Policy Manager=15.1.0
F5 BIG-IP Access Policy Manager=15.1.1
F5 BIG-IP Access Policy Manager=15.1.2
F5 BIG-IP Access Policy Manager=15.1.3
F5 BIG-IP Access Policy Manager=15.1.4
F5 BIG-IP Access Policy Manager=15.1.5
F5 BIG-IP Access Policy Manager=16.1.0
F5 BIG-IP Access Policy Manager=16.1.1
F5 BIG-IP Access Policy Manager=16.1.2
F5 BIG-IP Advanced Firewall Manager=15.1.0
F5 BIG-IP Advanced Firewall Manager=15.1.1
F5 BIG-IP Advanced Firewall Manager=15.1.2
F5 BIG-IP Advanced Firewall Manager=15.1.3
F5 BIG-IP Advanced Firewall Manager=15.1.4
F5 BIG-IP Advanced Firewall Manager=15.1.5
F5 BIG-IP Advanced Firewall Manager=16.1.0
F5 BIG-IP Advanced Firewall Manager=16.1.1
F5 BIG-IP Advanced Firewall Manager=16.1.2
F5 BIG-IP Analytics=15.1.0
F5 BIG-IP Analytics=15.1.1
F5 BIG-IP Analytics=15.1.2
F5 BIG-IP Analytics=15.1.3
F5 BIG-IP Analytics=15.1.4
F5 BIG-IP Analytics=15.1.5
F5 BIG-IP Analytics=16.1.0
F5 BIG-IP Analytics=16.1.1
F5 BIG-IP Analytics=16.1.2
F5 Big-ip Application Acceleration Manager=15.1.0
F5 Big-ip Application Acceleration Manager=15.1.1
F5 Big-ip Application Acceleration Manager=15.1.2
F5 Big-ip Application Acceleration Manager=15.1.3
F5 Big-ip Application Acceleration Manager=15.1.4
F5 Big-ip Application Acceleration Manager=15.1.5
F5 Big-ip Application Acceleration Manager=16.1.0
F5 Big-ip Application Acceleration Manager=16.1.1
F5 Big-ip Application Acceleration Manager=16.1.2
F5 BIG-IP Application Security Manager=15.1.0
F5 BIG-IP Application Security Manager=15.1.1
F5 BIG-IP Application Security Manager=15.1.2
F5 BIG-IP Application Security Manager=15.1.3
F5 BIG-IP Application Security Manager=15.1.4
F5 BIG-IP Application Security Manager=15.1.5
F5 BIG-IP Application Security Manager=16.1.0
F5 BIG-IP Application Security Manager=16.1.1
F5 BIG-IP Application Security Manager=16.1.2
F5 Big-ip Domain Name System=15.1.0
F5 Big-ip Domain Name System=15.1.1
F5 Big-ip Domain Name System=15.1.2
F5 Big-ip Domain Name System=15.1.3
F5 Big-ip Domain Name System=15.1.4
F5 Big-ip Domain Name System=15.1.5
F5 Big-ip Domain Name System=16.1.0
F5 Big-ip Domain Name System=16.1.1
F5 Big-ip Domain Name System=16.1.2
F5 Big-ip Fraud Protection Service=15.1.0
F5 Big-ip Fraud Protection Service=15.1.1
F5 Big-ip Fraud Protection Service=15.1.2
F5 Big-ip Fraud Protection Service=15.1.3
F5 Big-ip Fraud Protection Service=15.1.4
F5 Big-ip Fraud Protection Service=15.1.5
F5 Big-ip Fraud Protection Service=16.1.0
F5 Big-ip Fraud Protection Service=16.1.1
F5 Big-ip Fraud Protection Service=16.1.2
F5 Big-ip Global Traffic Manager=15.1.0
F5 Big-ip Global Traffic Manager=15.1.1
F5 Big-ip Global Traffic Manager=15.1.2
F5 Big-ip Global Traffic Manager=15.1.3
F5 Big-ip Global Traffic Manager=15.1.4
F5 Big-ip Global Traffic Manager=15.1.5
F5 Big-ip Global Traffic Manager=16.1.0
F5 Big-ip Global Traffic Manager=16.1.1
F5 Big-ip Global Traffic Manager=16.1.2
F5 Big-ip Link Controller=15.1.0
F5 Big-ip Link Controller=15.1.1
F5 Big-ip Link Controller=15.1.2
F5 Big-ip Link Controller=15.1.3
F5 Big-ip Link Controller=15.1.4
F5 Big-ip Link Controller=15.1.5
F5 Big-ip Link Controller=16.1.0
F5 Big-ip Link Controller=16.1.1
F5 Big-ip Link Controller=16.1.2
F5 Big-ip Local Traffic Manager=15.1.0
F5 Big-ip Local Traffic Manager=15.1.1
F5 Big-ip Local Traffic Manager=15.1.2
F5 Big-ip Local Traffic Manager=15.1.3
F5 Big-ip Local Traffic Manager=15.1.4
F5 Big-ip Local Traffic Manager=15.1.5
F5 Big-ip Local Traffic Manager=16.1.0
F5 Big-ip Local Traffic Manager=16.1.1
F5 Big-ip Local Traffic Manager=16.1.2
F5 Big-ip Policy Enforcement Manager=15.1.0
F5 Big-ip Policy Enforcement Manager=15.1.1
F5 Big-ip Policy Enforcement Manager=15.1.2
F5 Big-ip Policy Enforcement Manager=15.1.3
F5 Big-ip Policy Enforcement Manager=15.1.4
F5 Big-ip Policy Enforcement Manager=15.1.5
F5 Big-ip Policy Enforcement Manager=16.1.0
F5 Big-ip Policy Enforcement Manager=16.1.1
F5 Big-ip Policy Enforcement Manager=16.1.2
Event History
May 5, 2022
CVE Published
via MITRE·04:40 PM
Data Sourced
via MITRE·04:40 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-28708?
CVE-2022-28708 has been classified as a medium severity vulnerability.
2
Which F5 BIG-IP versions are affected by CVE-2022-28708?
CVE-2022-28708 affects F5 BIG-IP versions 16.1.x prior to 16.1.2.2 and 15.1.x prior to 15.1.5.1.
3
What impact does CVE-2022-28708 have on affected systems?
An undisclosed DNS response can cause the Traffic Management Microkernel (TMM) process to terminate on affected systems.
4
How do I fix CVE-2022-28708?
To fix CVE-2022-28708, upgrade to F5 BIG-IP version 16.1.2.2 or 15.1.5.1 or later.
5
Is there a specific configuration that triggers CVE-2022-28708?
Yes, this vulnerability can be triggered when a BIG-IP DNS resolver-enabled, HTTP-Explicit or SOCKS profile is configured on a virtual server.