CVE-2022-36795: BIG-IP software SYN cookies vulnerability CVE-2022-36795
Published Oct 19, 2022
·Updated
In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, and 14.1.x before 14.1.5.1, when an LTM TCP profile with Auto Receive Window Enabled is configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing new client connections.
Affected Software
44 affected components
F5 BIG-IP Access Policy Manager>=14.1.0<14.1.5.1
F5 BIG-IP Access Policy Manager>=15.1.0<15.1.7
F5 BIG-IP Access Policy Manager>=16.1.0<16.1.3.1
F5 BIG-IP Access Policy Manager>=17.0.0<17.0.0.1
F5 BIG-IP Advanced Firewall Manager>=14.1.0<14.1.5.1
F5 BIG-IP Advanced Firewall Manager>=15.1.0<15.1.7
F5 BIG-IP Advanced Firewall Manager>=16.1.0<16.1.3.1
F5 BIG-IP Advanced Firewall Manager>=17.0.0<17.0.0.1
F5 BIG-IP Analytics>=14.1.0<14.1.5.1
F5 BIG-IP Analytics>=15.1.0<15.1.7
F5 BIG-IP Analytics>=16.1.0<16.1.3.1
F5 BIG-IP Analytics>=17.0.0<17.0.0.1
F5 Big-ip Application Acceleration Manager>=14.1.0<14.1.5.1
F5 Big-ip Application Acceleration Manager>=15.1.0<15.1.7
F5 Big-ip Application Acceleration Manager>=16.1.0<16.1.3.1
F5 Big-ip Application Acceleration Manager>=17.0.0<17.0.0.1
F5 BIG-IP Application Security Manager>=14.1.0<14.1.5.1
F5 BIG-IP Application Security Manager>=15.1.0<15.1.7
F5 BIG-IP Application Security Manager>=16.1.0<16.1.3.1
F5 BIG-IP Application Security Manager>=17.0.0<=17.0.0.1
F5 Big-ip Domain Name System>=14.1.0<14.1.5.1
F5 Big-ip Domain Name System>=15.1.0<15.1.7
F5 Big-ip Domain Name System>=16.1.0<16.1.3.1
F5 Big-ip Domain Name System>=17.0.0<17.0.0.1
F5 Big-ip Fraud Protection Service>=14.1.0<14.1.5.1
F5 Big-ip Fraud Protection Service>=15.1.0<15.1.7
F5 Big-ip Fraud Protection Service>=16.1.0<16.1.3.1
F5 Big-ip Fraud Protection Service>=17.0.0<17.0.0.1
F5 Big-ip Global Traffic Manager>=14.1.0<14.1.5.1
F5 Big-ip Global Traffic Manager>=15.1.0<15.1.7
F5 Big-ip Global Traffic Manager>=16.1.0<16.1.3.1
F5 Big-ip Global Traffic Manager>=17.0.0<17.0.0.1
F5 Big-ip Link Controller>=14.1.0<14.1.5.1
F5 Big-ip Link Controller>=15.1.0<15.1.7
F5 Big-ip Link Controller>=16.1.0<16.1.3.1
F5 Big-ip Link Controller>=17.0.0<17.0.0.1
F5 Big-ip Local Traffic Manager>=14.1.0<14.1.5.1
F5 Big-ip Local Traffic Manager>=15.1.0<15.1.7
F5 Big-ip Local Traffic Manager>=16.1.0<16.1.3.1
F5 Big-ip Local Traffic Manager>=17.0.0<17.0.0.1
F5 Big-ip Policy Enforcement Manager>=14.1.0<14.1.5.1
F5 Big-ip Policy Enforcement Manager>=15.1.0<15.1.7
F5 Big-ip Policy Enforcement Manager>=16.1.0<16.1.3.1
F5 Big-ip Policy Enforcement Manager>=17.0.0<17.0.0.1
Event History
Oct 19, 2022
CVE Published
via MITRE·09:18 PM
Data Sourced
via MITRE·09:18 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-36795?
The severity of CVE-2022-36795 is high.
2
Which versions of F5 BIG-IP are affected by CVE-2022-36795?
F5 BIG-IP versions 14.1.x, 15.1.x, 16.1.x, and 17.0.x are affected by CVE-2022-36795.
3
How does CVE-2022-36795 impact virtual servers?
CVE-2022-36795 can cause virtual servers to stop processing new client connections.
4
What is the fix for CVE-2022-36795?
To fix CVE-2022-36795, users should upgrade to the patched versions of F5 BIG-IP as mentioned in the advisory.
5
Is there any additional information available for CVE-2022-36795?
For more information about CVE-2022-36795, you can refer to the official F5 support article at the provided reference link.