CVE-2022-29491: Null Pointer Dereference

Published May 5, 2022
·
Updated

On F5 BIG-IP LTM, Advanced WAF, ASM, or APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a virtual server is configured with HTTP, TCP on one side (client/server), and DTLS on the other (server/client), undisclosed requests can cause the TMM process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Affected Software

124 affected components
F5 BIG-IP Access Policy Manager=11.6.1
F5 BIG-IP Access Policy Manager=11.6.2
F5 BIG-IP Access Policy Manager=11.6.3
F5 BIG-IP Access Policy Manager=11.6.4
F5 BIG-IP Access Policy Manager=11.6.5
F5 BIG-IP Access Policy Manager=12.1.0
F5 BIG-IP Access Policy Manager=12.1.1
F5 BIG-IP Access Policy Manager=12.1.2
F5 BIG-IP Access Policy Manager=12.1.3
F5 BIG-IP Access Policy Manager=12.1.4
F5 BIG-IP Access Policy Manager=12.1.5
F5 BIG-IP Access Policy Manager=12.1.6
F5 BIG-IP Access Policy Manager=13.1.0
F5 BIG-IP Access Policy Manager=13.1.1
F5 BIG-IP Access Policy Manager=13.1.3
F5 BIG-IP Access Policy Manager=13.1.4
F5 BIG-IP Access Policy Manager=13.1.5
F5 BIG-IP Access Policy Manager=14.1.0
F5 BIG-IP Access Policy Manager=14.1.2
F5 BIG-IP Access Policy Manager=14.1.3
F5 BIG-IP Access Policy Manager=14.1.4
F5 BIG-IP Access Policy Manager=15.1.0
F5 BIG-IP Access Policy Manager=15.1.1
F5 BIG-IP Access Policy Manager=15.1.2
F5 BIG-IP Access Policy Manager=15.1.3
F5 BIG-IP Access Policy Manager=15.1.4
F5 BIG-IP Access Policy Manager=15.1.5
F5 BIG-IP Access Policy Manager=16.1.0
F5 BIG-IP Access Policy Manager=16.1.1
F5 BIG-IP Access Policy Manager=16.1.2
F5 BIG-IP Access Policy Manager=17.0.0
F5 Big-ip Advanced Web Application Firewall=11.6.1
F5 Big-ip Advanced Web Application Firewall=11.6.2
F5 Big-ip Advanced Web Application Firewall=11.6.3
F5 Big-ip Advanced Web Application Firewall=11.6.4
F5 Big-ip Advanced Web Application Firewall=11.6.5
F5 Big-ip Advanced Web Application Firewall=12.1.0
F5 Big-ip Advanced Web Application Firewall=12.1.1
F5 Big-ip Advanced Web Application Firewall=12.1.2
F5 Big-ip Advanced Web Application Firewall=12.1.3
F5 Big-ip Advanced Web Application Firewall=12.1.4
F5 Big-ip Advanced Web Application Firewall=12.1.5
F5 Big-ip Advanced Web Application Firewall=12.1.6
F5 Big-ip Advanced Web Application Firewall=13.1.0
F5 Big-ip Advanced Web Application Firewall=13.1.1
F5 Big-ip Advanced Web Application Firewall=13.1.3
F5 Big-ip Advanced Web Application Firewall=13.1.4
F5 Big-ip Advanced Web Application Firewall=13.1.5
F5 Big-ip Advanced Web Application Firewall=14.1.0
F5 Big-ip Advanced Web Application Firewall=14.1.2
F5 Big-ip Advanced Web Application Firewall=14.1.3
F5 Big-ip Advanced Web Application Firewall=14.1.4
F5 Big-ip Advanced Web Application Firewall=15.1.0
F5 Big-ip Advanced Web Application Firewall=15.1.1
F5 Big-ip Advanced Web Application Firewall=15.1.2
F5 Big-ip Advanced Web Application Firewall=15.1.3
F5 Big-ip Advanced Web Application Firewall=15.1.4
F5 Big-ip Advanced Web Application Firewall=15.1.5
F5 Big-ip Advanced Web Application Firewall=16.1.0
F5 Big-ip Advanced Web Application Firewall=16.1.1
F5 Big-ip Advanced Web Application Firewall=16.1.2
F5 Big-ip Advanced Web Application Firewall=17.0.0
F5 BIG-IP Application Security Manager=11.6.1
F5 BIG-IP Application Security Manager=11.6.2
F5 BIG-IP Application Security Manager=11.6.3
F5 BIG-IP Application Security Manager=11.6.4
F5 BIG-IP Application Security Manager=11.6.5
F5 BIG-IP Application Security Manager=12.1.0
F5 BIG-IP Application Security Manager=12.1.1
F5 BIG-IP Application Security Manager=12.1.2
F5 BIG-IP Application Security Manager=12.1.3
F5 BIG-IP Application Security Manager=12.1.4
F5 BIG-IP Application Security Manager=12.1.5
F5 BIG-IP Application Security Manager=12.1.6
F5 BIG-IP Application Security Manager=13.1.0
F5 BIG-IP Application Security Manager=13.1.1
F5 BIG-IP Application Security Manager=13.1.3
F5 BIG-IP Application Security Manager=13.1.4
F5 BIG-IP Application Security Manager=13.1.5
F5 BIG-IP Application Security Manager=14.1.0
F5 BIG-IP Application Security Manager=14.1.2
F5 BIG-IP Application Security Manager=14.1.3
F5 BIG-IP Application Security Manager=14.1.4
F5 BIG-IP Application Security Manager=15.1.0
F5 BIG-IP Application Security Manager=15.1.1
F5 BIG-IP Application Security Manager=15.1.2
F5 BIG-IP Application Security Manager=15.1.3
F5 BIG-IP Application Security Manager=15.1.4
F5 BIG-IP Application Security Manager=15.1.5
F5 BIG-IP Application Security Manager=16.1.0
F5 BIG-IP Application Security Manager=16.1.1
F5 BIG-IP Application Security Manager=16.1.2
F5 BIG-IP Application Security Manager=17.0.0
F5 Big-ip Local Traffic Manager=11.6.1
F5 Big-ip Local Traffic Manager=11.6.2
F5 Big-ip Local Traffic Manager=11.6.3
F5 Big-ip Local Traffic Manager=11.6.4
F5 Big-ip Local Traffic Manager=11.6.5
F5 Big-ip Local Traffic Manager=12.1.0
F5 Big-ip Local Traffic Manager=12.1.1
F5 Big-ip Local Traffic Manager=12.1.2
F5 Big-ip Local Traffic Manager=12.1.3
F5 Big-ip Local Traffic Manager=12.1.4
F5 Big-ip Local Traffic Manager=12.1.5
F5 Big-ip Local Traffic Manager=12.1.6
F5 Big-ip Local Traffic Manager=13.1.0
F5 Big-ip Local Traffic Manager=13.1.1
F5 Big-ip Local Traffic Manager=13.1.3
F5 Big-ip Local Traffic Manager=13.1.4
F5 Big-ip Local Traffic Manager=13.1.5
F5 Big-ip Local Traffic Manager=14.1.0
F5 Big-ip Local Traffic Manager=14.1.2
F5 Big-ip Local Traffic Manager=14.1.3
F5 Big-ip Local Traffic Manager=14.1.4
F5 Big-ip Local Traffic Manager=15.1.0
F5 Big-ip Local Traffic Manager=15.1.1
F5 Big-ip Local Traffic Manager=15.1.2
F5 Big-ip Local Traffic Manager=15.1.3
F5 Big-ip Local Traffic Manager=15.1.4
F5 Big-ip Local Traffic Manager=15.1.5
F5 Big-ip Local Traffic Manager=16.1.0
F5 Big-ip Local Traffic Manager=16.1.1
F5 Big-ip Local Traffic Manager=16.1.2
F5 Big-ip Local Traffic Manager=17.0.0

Event History

May 5, 2022
CVE Published
via MITRE·04:49 PM
Data Sourced
via MITRE·04:49 PM
DescriptionSeverityWeakness

Frequently Asked Questions

1

What is the severity of CVE-2022-29491?

CVE-2022-29491 has been rated as high severity due to potential manipulation of traffic and unauthorized access.

2

How do I fix CVE-2022-29491?

To mitigate CVE-2022-29491, upgrade your F5 BIG-IP software to version 16.1.2.2 or later, 15.1.5 or later, or 14.1.4.6 or later.

3

Which software versions are affected by CVE-2022-29491?

CVE-2022-29491 affects F5 BIG-IP LTM, Advanced WAF, ASM, and APM in specific versions prior to the identified patched versions.

4

What are the potential impacts of CVE-2022-29491?

Exploitation of CVE-2022-29491 could allow an attacker to bypass intended security controls, leading to data leakage or unauthorized access.

5

Is CVE-2022-29491 a common vulnerability?

CVE-2022-29491 is considered a significant vulnerability given its potential to be exploited in environments using affected F5 products.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203