CVE-2021-22985 Denial of service in BIG-IP APM
An authenticated VPN user can cause excessive memory consumption in TMM, leading to a denial of service against BIG-IP APM.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-22985?
CVE-2021-22985 is a high-severity denial of service vulnerability in F5 Big-Ip Application Security Manager, published on 12 Feb 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
On BIG-IP APM version 16.0.x before 16.0.1.1, under certain conditions, when processing VPN traffic with APM, TMM consumes excessive memory. A malicious, authenticated VPN user may abuse this to perform a DoS attack against the APM. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.
Weakness: CWE-400
Which versions are affected by CVE-2021-22985?
It affects 1 product.
Products include F5 Big-Ip Application Security Manager.
How do I fix CVE-2021-22985?
No fix has been published for CVE-2021-22985 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2021-22985 being exploited?
There is no known exploitation of CVE-2021-22985 in the wild and no public exploit code.
Other vulnerabilities in F5 Big-Ip Application Security Manager
Sources
Also known as GHSA-fj8x-2c72-3h8w.