First published: Thu May 05 2022(Updated: )
On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Management all versions of 8.x and 7.x, when an IPv6 self IP address is configured and the ipv6.strictcompliance database key is enabled (disabled by default) on a BIG-IP system, undisclosed packets may cause decreased performance. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Credit: f5sirt@f5.com
Affected Software | Affected Version | How to fix |
---|---|---|
F5 BIG-IP Access Policy Manager | =11.6.1 | |
F5 BIG-IP Access Policy Manager | =11.6.2 | |
F5 BIG-IP Access Policy Manager | =11.6.3 | |
F5 BIG-IP Access Policy Manager | =11.6.4 | |
F5 BIG-IP Access Policy Manager | =11.6.5 | |
F5 BIG-IP Access Policy Manager | =12.1.0 | |
F5 BIG-IP Access Policy Manager | =12.1.1 | |
F5 BIG-IP Access Policy Manager | =12.1.2 | |
F5 BIG-IP Access Policy Manager | =12.1.3 | |
F5 BIG-IP Access Policy Manager | =12.1.4 | |
F5 BIG-IP Access Policy Manager | =12.1.5 | |
F5 BIG-IP Access Policy Manager | =12.1.6 | |
F5 BIG-IP Access Policy Manager | =13.1.0 | |
F5 BIG-IP Access Policy Manager | =13.1.1 | |
F5 BIG-IP Access Policy Manager | =13.1.3 | |
F5 BIG-IP Access Policy Manager | =13.1.4 | |
F5 BIG-IP Access Policy Manager | =13.1.5 | |
F5 BIG-IP Access Policy Manager | =14.1.0 | |
F5 BIG-IP Access Policy Manager | =14.1.2 | |
F5 BIG-IP Access Policy Manager | =14.1.3 | |
F5 BIG-IP Access Policy Manager | =14.1.4 | |
F5 BIG-IP Access Policy Manager | =15.1.0 | |
F5 BIG-IP Access Policy Manager | =15.1.1 | |
F5 BIG-IP Access Policy Manager | =15.1.2 | |
F5 BIG-IP Access Policy Manager | =15.1.3 | |
F5 BIG-IP Access Policy Manager | =15.1.4 | |
F5 BIG-IP Access Policy Manager | =15.1.5 | |
F5 BIG-IP Access Policy Manager | =16.1.0 | |
F5 BIG-IP Access Policy Manager | =16.1.1 | |
F5 BIG-IP Access Policy Manager | =16.1.2 | |
F5 BIG-IP Access Policy Manager | =17.0.0 | |
F5 BIG-IP Advanced Firewall Manager | =11.6.1 | |
F5 BIG-IP Advanced Firewall Manager | =11.6.2 | |
F5 BIG-IP Advanced Firewall Manager | =11.6.3 | |
F5 BIG-IP Advanced Firewall Manager | =11.6.4 | |
F5 BIG-IP Advanced Firewall Manager | =11.6.5 | |
F5 BIG-IP Advanced Firewall Manager | =12.1.0 | |
F5 BIG-IP Advanced Firewall Manager | =12.1.1 | |
F5 BIG-IP Advanced Firewall Manager | =12.1.2 | |
F5 BIG-IP Advanced Firewall Manager | =12.1.3 | |
F5 BIG-IP Advanced Firewall Manager | =12.1.4 | |
F5 BIG-IP Advanced Firewall Manager | =12.1.5 | |
F5 BIG-IP Advanced Firewall Manager | =12.1.6 | |
F5 BIG-IP Advanced Firewall Manager | =13.1.0 | |
F5 BIG-IP Advanced Firewall Manager | =13.1.1 | |
F5 BIG-IP Advanced Firewall Manager | =13.1.3 | |
F5 BIG-IP Advanced Firewall Manager | =13.1.4 | |
F5 BIG-IP Advanced Firewall Manager | =13.1.5 | |
F5 BIG-IP Advanced Firewall Manager | =14.1.0 | |
F5 BIG-IP Advanced Firewall Manager | =14.1.2 | |
F5 BIG-IP Advanced Firewall Manager | =14.1.3 | |
F5 BIG-IP Advanced Firewall Manager | =14.1.4 | |
F5 BIG-IP Advanced Firewall Manager | =15.1.0 | |
F5 BIG-IP Advanced Firewall Manager | =15.1.1 | |
F5 BIG-IP Advanced Firewall Manager | =15.1.2 | |
F5 BIG-IP Advanced Firewall Manager | =15.1.3 | |
F5 BIG-IP Advanced Firewall Manager | =15.1.4 | |
F5 BIG-IP Advanced Firewall Manager | =15.1.5 | |
F5 BIG-IP Advanced Firewall Manager | =16.1.0 | |
F5 BIG-IP Advanced Firewall Manager | =16.1.1 | |
F5 BIG-IP Advanced Firewall Manager | =16.1.2 | |
F5 BIG-IP Advanced Firewall Manager | =17.0.0 | |
F5 BIG-IP Analytics | =11.6.1 | |
F5 BIG-IP Analytics | =11.6.2 | |
F5 BIG-IP Analytics | =11.6.3 | |
F5 BIG-IP Analytics | =11.6.4 | |
F5 BIG-IP Analytics | =11.6.5 | |
F5 BIG-IP Analytics | =12.1.0 | |
F5 BIG-IP Analytics | =12.1.1 | |
F5 BIG-IP Analytics | =12.1.2 | |
F5 BIG-IP Analytics | =12.1.3 | |
F5 BIG-IP Analytics | =12.1.4 | |
F5 BIG-IP Analytics | =12.1.5 | |
F5 BIG-IP Analytics | =12.1.6 | |
F5 BIG-IP Analytics | =13.1.0 | |
F5 BIG-IP Analytics | =13.1.1 | |
F5 BIG-IP Analytics | =13.1.3 | |
F5 BIG-IP Analytics | =13.1.4 | |
F5 BIG-IP Analytics | =13.1.5 | |
F5 BIG-IP Analytics | =14.1.0 | |
F5 BIG-IP Analytics | =14.1.2 | |
F5 BIG-IP Analytics | =14.1.3 | |
F5 BIG-IP Analytics | =14.1.4 | |
F5 BIG-IP Analytics | =15.1.0 | |
F5 BIG-IP Analytics | =15.1.1 | |
F5 BIG-IP Analytics | =15.1.2 | |
F5 BIG-IP Analytics | =15.1.3 | |
F5 BIG-IP Analytics | =15.1.4 | |
F5 BIG-IP Analytics | =15.1.5 | |
F5 BIG-IP Analytics | =16.1.0 | |
F5 BIG-IP Analytics | =16.1.1 | |
F5 BIG-IP Analytics | =16.1.2 | |
F5 BIG-IP Analytics | =17.0.0 | |
f5 big-ip application acceleration manager | =11.6.1 | |
f5 big-ip application acceleration manager | =11.6.2 | |
f5 big-ip application acceleration manager | =11.6.3 | |
f5 big-ip application acceleration manager | =11.6.4 | |
f5 big-ip application acceleration manager | =11.6.5 | |
f5 big-ip application acceleration manager | =12.1.0 | |
f5 big-ip application acceleration manager | =12.1.1 | |
f5 big-ip application acceleration manager | =12.1.2 | |
f5 big-ip application acceleration manager | =12.1.3 | |
f5 big-ip application acceleration manager | =12.1.4 | |
f5 big-ip application acceleration manager | =12.1.5 | |
f5 big-ip application acceleration manager | =12.1.6 | |
f5 big-ip application acceleration manager | =13.1.0 | |
f5 big-ip application acceleration manager | =13.1.1 | |
f5 big-ip application acceleration manager | =13.1.3 | |
f5 big-ip application acceleration manager | =13.1.4 | |
f5 big-ip application acceleration manager | =13.1.5 | |
f5 big-ip application acceleration manager | =14.1.0 | |
f5 big-ip application acceleration manager | =14.1.2 | |
f5 big-ip application acceleration manager | =14.1.3 | |
f5 big-ip application acceleration manager | =14.1.4 | |
f5 big-ip application acceleration manager | =15.1.0 | |
f5 big-ip application acceleration manager | =15.1.1 | |
f5 big-ip application acceleration manager | =15.1.2 | |
f5 big-ip application acceleration manager | =15.1.3 | |
f5 big-ip application acceleration manager | =15.1.4 | |
f5 big-ip application acceleration manager | =15.1.5 | |
f5 big-ip application acceleration manager | =16.1.0 | |
f5 big-ip application acceleration manager | =16.1.1 | |
f5 big-ip application acceleration manager | =16.1.2 | |
f5 big-ip application acceleration manager | =17.0.0 | |
F5 BIG-IP Application Security Manager | =11.6.1 | |
F5 BIG-IP Application Security Manager | =11.6.2 | |
F5 BIG-IP Application Security Manager | =11.6.3 | |
F5 BIG-IP Application Security Manager | =11.6.4 | |
F5 BIG-IP Application Security Manager | =11.6.5 | |
F5 BIG-IP Application Security Manager | =12.1.0 | |
F5 BIG-IP Application Security Manager | =12.1.1 | |
F5 BIG-IP Application Security Manager | =12.1.2 | |
F5 BIG-IP Application Security Manager | =12.1.3 | |
F5 BIG-IP Application Security Manager | =12.1.4 | |
F5 BIG-IP Application Security Manager | =12.1.5 | |
F5 BIG-IP Application Security Manager | =12.1.6 | |
F5 BIG-IP Application Security Manager | =13.1.0 | |
F5 BIG-IP Application Security Manager | =13.1.1 | |
F5 BIG-IP Application Security Manager | =13.1.3 | |
F5 BIG-IP Application Security Manager | =13.1.4 | |
F5 BIG-IP Application Security Manager | =13.1.5 | |
F5 BIG-IP Application Security Manager | =14.1.0 | |
F5 BIG-IP Application Security Manager | =14.1.2 | |
F5 BIG-IP Application Security Manager | =14.1.3 | |
F5 BIG-IP Application Security Manager | =14.1.4 | |
F5 BIG-IP Application Security Manager | =15.1.0 | |
F5 BIG-IP Application Security Manager | =15.1.1 | |
F5 BIG-IP Application Security Manager | =15.1.2 | |
F5 BIG-IP Application Security Manager | =15.1.3 | |
F5 BIG-IP Application Security Manager | =15.1.4 | |
F5 BIG-IP Application Security Manager | =15.1.5 | |
F5 BIG-IP Application Security Manager | =16.1.0 | |
F5 BIG-IP Application Security Manager | =16.1.1 | |
F5 BIG-IP Application Security Manager | =16.1.2 | |
F5 BIG-IP Application Security Manager | =17.0.0 | |
f5 big-ip domain name system | =11.6.1 | |
f5 big-ip domain name system | =11.6.2 | |
f5 big-ip domain name system | =11.6.3 | |
f5 big-ip domain name system | =11.6.4 | |
f5 big-ip domain name system | =11.6.5 | |
f5 big-ip domain name system | =12.1.0 | |
f5 big-ip domain name system | =12.1.1 | |
f5 big-ip domain name system | =12.1.2 | |
f5 big-ip domain name system | =12.1.3 | |
f5 big-ip domain name system | =12.1.4 | |
f5 big-ip domain name system | =12.1.5 | |
f5 big-ip domain name system | =12.1.6 | |
f5 big-ip domain name system | =13.1.0 | |
f5 big-ip domain name system | =13.1.1 | |
f5 big-ip domain name system | =13.1.3 | |
f5 big-ip domain name system | =13.1.4 | |
f5 big-ip domain name system | =13.1.5 | |
f5 big-ip domain name system | =14.1.0 | |
f5 big-ip domain name system | =14.1.2 | |
f5 big-ip domain name system | =14.1.3 | |
f5 big-ip domain name system | =14.1.4 | |
f5 big-ip domain name system | =15.1.0 | |
f5 big-ip domain name system | =15.1.1 | |
f5 big-ip domain name system | =15.1.2 | |
f5 big-ip domain name system | =15.1.3 | |
f5 big-ip domain name system | =15.1.4 | |
f5 big-ip domain name system | =15.1.5 | |
f5 big-ip domain name system | =16.1.0 | |
f5 big-ip domain name system | =16.1.1 | |
f5 big-ip domain name system | =16.1.2 | |
f5 big-ip domain name system | =17.0.0 | |
f5 big-ip fraud protection service | =11.6.1 | |
f5 big-ip fraud protection service | =11.6.2 | |
f5 big-ip fraud protection service | =11.6.3 | |
f5 big-ip fraud protection service | =11.6.4 | |
f5 big-ip fraud protection service | =11.6.5 | |
f5 big-ip fraud protection service | =12.1.0 | |
f5 big-ip fraud protection service | =12.1.1 | |
f5 big-ip fraud protection service | =12.1.2 | |
f5 big-ip fraud protection service | =12.1.3 | |
f5 big-ip fraud protection service | =12.1.4 | |
f5 big-ip fraud protection service | =12.1.5 | |
f5 big-ip fraud protection service | =12.1.6 | |
f5 big-ip fraud protection service | =13.1.0 | |
f5 big-ip fraud protection service | =13.1.1 | |
f5 big-ip fraud protection service | =13.1.3 | |
f5 big-ip fraud protection service | =13.1.4 | |
f5 big-ip fraud protection service | =13.1.5 | |
f5 big-ip fraud protection service | =14.1.0 | |
f5 big-ip fraud protection service | =14.1.2 | |
f5 big-ip fraud protection service | =14.1.3 | |
f5 big-ip fraud protection service | =14.1.4 | |
f5 big-ip fraud protection service | =15.1.0 | |
f5 big-ip fraud protection service | =15.1.1 | |
f5 big-ip fraud protection service | =15.1.2 | |
f5 big-ip fraud protection service | =15.1.3 | |
f5 big-ip fraud protection service | =15.1.4 | |
f5 big-ip fraud protection service | =15.1.5 | |
f5 big-ip fraud protection service | =16.1.0 | |
f5 big-ip fraud protection service | =16.1.1 | |
f5 big-ip fraud protection service | =16.1.2 | |
f5 big-ip fraud protection service | =17.0.0 | |
F5 BIG-IP Global Traffic Manager | =11.6.1 | |
F5 BIG-IP Global Traffic Manager | =11.6.2 | |
F5 BIG-IP Global Traffic Manager | =11.6.3 | |
F5 BIG-IP Global Traffic Manager | =11.6.4 | |
F5 BIG-IP Global Traffic Manager | =11.6.5 | |
F5 BIG-IP Global Traffic Manager | =12.1.0 | |
F5 BIG-IP Global Traffic Manager | =12.1.1 | |
F5 BIG-IP Global Traffic Manager | =12.1.2 | |
F5 BIG-IP Global Traffic Manager | =12.1.3 | |
F5 BIG-IP Global Traffic Manager | =12.1.4 | |
F5 BIG-IP Global Traffic Manager | =12.1.5 | |
F5 BIG-IP Global Traffic Manager | =12.1.6 | |
F5 BIG-IP Global Traffic Manager | =13.1.0 | |
F5 BIG-IP Global Traffic Manager | =13.1.1 | |
F5 BIG-IP Global Traffic Manager | =13.1.3 | |
F5 BIG-IP Global Traffic Manager | =13.1.4 | |
F5 BIG-IP Global Traffic Manager | =13.1.5 | |
F5 BIG-IP Global Traffic Manager | =14.1.0 | |
F5 BIG-IP Global Traffic Manager | =14.1.2 | |
F5 BIG-IP Global Traffic Manager | =14.1.3 | |
F5 BIG-IP Global Traffic Manager | =14.1.4 | |
F5 BIG-IP Global Traffic Manager | =15.1.0 | |
F5 BIG-IP Global Traffic Manager | =15.1.1 | |
F5 BIG-IP Global Traffic Manager | =15.1.2 | |
F5 BIG-IP Global Traffic Manager | =15.1.3 | |
F5 BIG-IP Global Traffic Manager | =15.1.4 | |
F5 BIG-IP Global Traffic Manager | =15.1.5 | |
F5 BIG-IP Global Traffic Manager | =16.1.0 | |
F5 BIG-IP Global Traffic Manager | =16.1.1 | |
F5 BIG-IP Global Traffic Manager | =16.1.2 | |
F5 BIG-IP Global Traffic Manager | =17.0.0 | |
f5 big-ip link controller | =11.6.1 | |
f5 big-ip link controller | =11.6.2 | |
f5 big-ip link controller | =11.6.3 | |
f5 big-ip link controller | =11.6.4 | |
f5 big-ip link controller | =11.6.5 | |
f5 big-ip link controller | =12.1.0 | |
f5 big-ip link controller | =12.1.1 | |
f5 big-ip link controller | =12.1.2 | |
f5 big-ip link controller | =12.1.3 | |
f5 big-ip link controller | =12.1.4 | |
f5 big-ip link controller | =12.1.5 | |
f5 big-ip link controller | =12.1.6 | |
f5 big-ip link controller | =13.1.0 | |
f5 big-ip link controller | =13.1.1 | |
f5 big-ip link controller | =13.1.3 | |
f5 big-ip link controller | =13.1.4 | |
f5 big-ip link controller | =13.1.5 | |
f5 big-ip link controller | =14.1.0 | |
f5 big-ip link controller | =14.1.2 | |
f5 big-ip link controller | =14.1.3 | |
f5 big-ip link controller | =14.1.4 | |
f5 big-ip link controller | =15.1.0 | |
f5 big-ip link controller | =15.1.1 | |
f5 big-ip link controller | =15.1.2 | |
f5 big-ip link controller | =15.1.3 | |
f5 big-ip link controller | =15.1.4 | |
f5 big-ip link controller | =15.1.5 | |
f5 big-ip link controller | =16.1.0 | |
f5 big-ip link controller | =16.1.1 | |
f5 big-ip link controller | =16.1.2 | |
f5 big-ip link controller | =17.0.0 | |
F5 BIG-IP Local Traffic Manager | =11.6.1 | |
F5 BIG-IP Local Traffic Manager | =11.6.2 | |
F5 BIG-IP Local Traffic Manager | =11.6.3 | |
F5 BIG-IP Local Traffic Manager | =11.6.4 | |
F5 BIG-IP Local Traffic Manager | =11.6.5 | |
F5 BIG-IP Local Traffic Manager | =12.1.0 | |
F5 BIG-IP Local Traffic Manager | =12.1.1 | |
F5 BIG-IP Local Traffic Manager | =12.1.2 | |
F5 BIG-IP Local Traffic Manager | =12.1.3 | |
F5 BIG-IP Local Traffic Manager | =12.1.4 | |
F5 BIG-IP Local Traffic Manager | =12.1.5 | |
F5 BIG-IP Local Traffic Manager | =12.1.6 | |
F5 BIG-IP Local Traffic Manager | =13.1.0 | |
F5 BIG-IP Local Traffic Manager | =13.1.1 | |
F5 BIG-IP Local Traffic Manager | =13.1.3 | |
F5 BIG-IP Local Traffic Manager | =13.1.4 | |
F5 BIG-IP Local Traffic Manager | =13.1.5 | |
F5 BIG-IP Local Traffic Manager | =14.1.0 | |
F5 BIG-IP Local Traffic Manager | =14.1.2 | |
F5 BIG-IP Local Traffic Manager | =14.1.3 | |
F5 BIG-IP Local Traffic Manager | =14.1.4 | |
F5 BIG-IP Local Traffic Manager | =15.1.0 | |
F5 BIG-IP Local Traffic Manager | =15.1.1 | |
F5 BIG-IP Local Traffic Manager | =15.1.2 | |
F5 BIG-IP Local Traffic Manager | =15.1.3 | |
F5 BIG-IP Local Traffic Manager | =15.1.4 | |
F5 BIG-IP Local Traffic Manager | =15.1.5 | |
F5 BIG-IP Local Traffic Manager | =16.1.0 | |
F5 BIG-IP Local Traffic Manager | =16.1.1 | |
F5 BIG-IP Local Traffic Manager | =16.1.2 | |
F5 BIG-IP Local Traffic Manager | =17.0.0 | |
F5 BIG-IP Policy Enforcement Manager | =11.6.1 | |
F5 BIG-IP Policy Enforcement Manager | =11.6.2 | |
F5 BIG-IP Policy Enforcement Manager | =11.6.3 | |
F5 BIG-IP Policy Enforcement Manager | =11.6.4 | |
F5 BIG-IP Policy Enforcement Manager | =11.6.5 | |
F5 BIG-IP Policy Enforcement Manager | =12.1.0 | |
F5 BIG-IP Policy Enforcement Manager | =12.1.1 | |
F5 BIG-IP Policy Enforcement Manager | =12.1.2 | |
F5 BIG-IP Policy Enforcement Manager | =12.1.3 | |
F5 BIG-IP Policy Enforcement Manager | =12.1.4 | |
F5 BIG-IP Policy Enforcement Manager | =12.1.5 | |
F5 BIG-IP Policy Enforcement Manager | =12.1.6 | |
F5 BIG-IP Policy Enforcement Manager | =13.1.0 | |
F5 BIG-IP Policy Enforcement Manager | =13.1.1 | |
F5 BIG-IP Policy Enforcement Manager | =13.1.3 | |
F5 BIG-IP Policy Enforcement Manager | =13.1.4 | |
F5 BIG-IP Policy Enforcement Manager | =13.1.5 | |
F5 BIG-IP Policy Enforcement Manager | =14.1.0 | |
F5 BIG-IP Policy Enforcement Manager | =14.1.2 | |
F5 BIG-IP Policy Enforcement Manager | =14.1.3 | |
F5 BIG-IP Policy Enforcement Manager | =14.1.4 | |
F5 BIG-IP Policy Enforcement Manager | =15.1.0 | |
F5 BIG-IP Policy Enforcement Manager | =15.1.1 | |
F5 BIG-IP Policy Enforcement Manager | =15.1.2 | |
F5 BIG-IP Policy Enforcement Manager | =15.1.3 | |
F5 BIG-IP Policy Enforcement Manager | =15.1.4 | |
F5 BIG-IP Policy Enforcement Manager | =15.1.5 | |
F5 BIG-IP Policy Enforcement Manager | =16.1.0 | |
F5 BIG-IP Policy Enforcement Manager | =16.1.1 | |
F5 BIG-IP Policy Enforcement Manager | =16.1.2 | |
F5 BIG-IP Policy Enforcement Manager | =17.0.0 | |
F5 BIG-IQ Centralized Management | =7.0.0 | |
F5 BIG-IQ Centralized Management | =7.1.0 | |
F5 BIG-IQ Centralized Management | =8.0.0 | |
F5 BIG-IQ Centralized Management | =8.1.0 | |
F5 BIG-IQ Centralized Management | =8.2.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2022-29479 is classified as critical.
To fix CVE-2022-29479, update your F5 BIG-IP systems to the latest patched version, specifically versions 15.1.5.1 or later, 14.1.4.6 or later, or 13.1.5 or later.
CVE-2022-29479 affects F5 BIG-IP versions 15.1.x prior to 15.1.5.1, 14.1.x prior to 14.1.4.6, 13.1.x prior to 13.1.5, and all versions of 12.1.x and 11.6.x.
Yes, a temporary workaround for CVE-2022-29479 is to disable IPv6 self IP addresses.
If you can't update your F5 systems immediately, implement mitigation strategies such as restricting access to affected services and monitoring log files for suspicious activity.