CVE-2022-41806 BIG-IP AFM NAT64 Policy Vulnerability CVE-2022-41806
Attackers can cause memory exhaustion and denial of service on F5 BIG-IP AFM devices when NAT64 policies are configured.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-41806?
CVE-2022-41806 is a high-severity denial of service vulnerability in F5 Big-Ip Advanced Firewall Manager, published on 19 Oct 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In versions 16.1.x before 16.1.3.2 and 15.1.x before 15.1.5.1, when BIG-IP AFM Network Address Translation policy with IPv6/IPv4 translation rules is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.
Weakness: CWE-400
Which versions are affected by CVE-2022-41806?
It affects 1 product.
Products include F5 Big-Ip Advanced Firewall Manager.
How do I fix CVE-2022-41806?
No fix has been published for CVE-2022-41806 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2022-41806 being exploited?
There is no known exploitation of CVE-2022-41806 in the wild and no public exploit code.
Other vulnerabilities in F5 Big-Ip Advanced Firewall Manager
Sources
Also known as GHSA-xqp8-9mv7-5h3c.