Details of VAR-202205-0136

ID

VAR-202205-0136

CVE

CVE-2022-27189

TITLE

F5 BIG-IP Vulnerability regarding conversion error between numeric types in

Trust: 0.8

sources: JVNDB: JVNDB-2022-010275

DESCRIPTION

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when an Internet Content Adaptation Protocol (ICAP) profile is configured on a virtual server, undisclosed traffic can cause an increase in Traffic Management Microkernel (TMM) memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. F5 BIG-IP Exists in a vulnerability related to conversion errors between numeric types.Service operation interruption (DoS) It may be in a state. F5 BIG-IP is an application delivery platform of F5 that integrates functions such as network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. F5 BIG-IP has a security vulnerability that can be exploited by an attacker to cause a denial of service on the BIG-IP system

Trust: 1.8

sources: NVD: CVE-2022-27189 // JVNDB: JVNDB-2022-010275 // VULHUB: VHN-419866 // VULMON: CVE-2022-27189

AFFECTED PRODUCTS

vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	13.1.5	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	14.1.2	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	12.1.6	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	15.1.0	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	15.1.5	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.6.3	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	16.1.0	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	15.1.3	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	16.1.1	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	12.1.3	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	13.1.4	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.6.5	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	16.1.1	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	16.1.2	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	15.1.1	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.6.5	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	14.1.2	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	12.1.6	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	15.1.5	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.6.4	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	14.1.0	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	14.1.4	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	14.1.2	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	12.1.3	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	17.0.0	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	16.1.2	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	12.1.6	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	15.1.0	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	15.1.5	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	17.0.0	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	12.1.6	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	15.1.5	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.6.1	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	12.1.3	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	13.1.1	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	13.1.5	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	12.1.3	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	16.1.2	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	15.1.1	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	13.1.0	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	16.1.2	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.6.3	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	16.1.1	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	14.1.4	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	12.1.1	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	13.1.5	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	12.1.5	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	12.1.4	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	14.1.4	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.6.5	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	14.1.2	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	13.1.5	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	13.1.5	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	12.1.6	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	15.1.0	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	15.1.5	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	17.0.0	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	13.1.3	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.6.1	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	12.1.3	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	15.1.0	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	14.1.3	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	14.1.2	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	16.1.2	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	15.1.1	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	13.1.0	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	16.1.1	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	14.1.3	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	12.1.1	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	14.1.0	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	14.1.3	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	12.1.6	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	12.1.0	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	15.1.5	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	14.1.4	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	12.1.0	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	13.1.5	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	13.1.0	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	12.1.6	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	15.1.5	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	11.6.2	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	14.1.4	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	14.1.3	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	12.1.3	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	12.1.1	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	12.1.2	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	16.1.0	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	15.1.3	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	16.1.2	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	13.1.1	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	16.1.0	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	15.1.3	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	13.1.4	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.6.2	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.6.5	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	14.1.0	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	14.1.3	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	13.1.4	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	15.1.2	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	14.1.2	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.6.4	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	13.1.1	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.6.4	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	12.1.0	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.6.2	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	17.0.0	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	13.1.5	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.6.2	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	13.1.1	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	14.1.3	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.6.3	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	13.1.0	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	14.1.0	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	13.1.1	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	13.1.3	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	12.1.1	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	14.1.0	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.6.5	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	12.1.1	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	16.1.0	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	12.1.6	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	12.1.5	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	14.1.4	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	15.1.5	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	14.1.3	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	11.6.3	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	12.1.4	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	13.1.4	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	14.1.2	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	13.1.3	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	12.1.4	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	17.0.0	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	11.6.5	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.6.4	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	11.6.3	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.6.3	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.6.2	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	13.1.3	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	11.6.5	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	13.1.3	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	17.0.0	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.6.5	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	14.1.0	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	13.1.1	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	14.1.2	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.6.2	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	14.1.4	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	17.0.0	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	17.0.0	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	13.1.1	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	12.1.4	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.6.3	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	14.1.3	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.6.5	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	14.1.4	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	15.1.4	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	12.1.2	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	13.1.3	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	14.1.4	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	14.1.0	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	16.1.0	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	14.1.2	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	12.1.2	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.6.1	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	13.1.4	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	17.0.0	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	15.1.4	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	15.1.2	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	12.1.0	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	13.1.3	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.6.4	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	15.1.2	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	16.1.1	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.6.2	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.6.3	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	14.1.3	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	15.1.4	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	12.1.0	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	15.1.4	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	13.1.1	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.6.5	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	14.1.4	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	16.1.0	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	15.1.3	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	12.1.6	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	12.1.0	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	15.1.5	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	12.1.0	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	12.1.2	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	13.1.4	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	12.1.5	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	12.1.3	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	12.1.5	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	17.0.0	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	16.1.2	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	15.1.1	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	12.1.4	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.6.4	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	16.1.0	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	15.1.3	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	15.1.2	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	13.1.4	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.6.2	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	16.1.0	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	15.1.3	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	11.6.4	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	16.1.0	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	15.1.3	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	13.1.1	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	13.1.3	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	13.1.4	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	15.1.4	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	12.1.1	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	13.1.4	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	13.1.5	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	11.6.4	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	12.1.0	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.6.3	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.6.4	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	11.6.2	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	15.1.4	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	12.1.4	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	12.1.5	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	13.1.1	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	14.1.3	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	12.1.4	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	16.1.0	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	15.1.3	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	13.1.3	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	13.1.4	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	12.1.2	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	12.1.4	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	12.1.4	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	12.1.0	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.6.1	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.6.4	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	15.1.0	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	11.6.1	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	11.6.2	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	15.1.2	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	15.1.3	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.6.2	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	16.1.1	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	13.1.3	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	15.1.1	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	13.1.1	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	16.1.1	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	15.1.0	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	15.1.4	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	16.1.0	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	15.1.3	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	13.1.4	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	15.1.1	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	12.1.2	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	12.1.6	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	15.1.0	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	15.1.5	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	12.1.4	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	11.6.4	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	12.1.6	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	15.1.0	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	15.1.5	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	12.1.3	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	16.1.2	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	14.1.0	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	15.1.1	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	11.6.1	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	12.1.2	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	12.1.3	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	15.1.2	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	16.1.2	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	15.1.1	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	13.1.3	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	12.1.0	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	16.1.1	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	12.1.2	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	15.1.4	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	15.1.2	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	12.1.2	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	13.1.5	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.6.3	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	15.1.2	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	12.1.4	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	13.1.5	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	15.1.2	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	12.1.5	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	15.1.3	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	15.1.0	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	11.6.5	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	13.1.0	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	12.1.3	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	15.1.4	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	14.1.2	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	16.1.2	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	15.1.1	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	12.1.1	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	14.1.3	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	12.1.5	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	15.1.0	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	17.0.0	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	13.1.0	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	12.1.2	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	12.1.5	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	15.1.1	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	12.1.1	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	12.1.5	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	15.1.2	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	13.1.0	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	11.6.1	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	13.1.5	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	13.1.0	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	14.1.4	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	12.1.1	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	15.1.4	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	12.1.1	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	16.1.1	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	14.1.0	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	15.1.4	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	13.1.0	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	12.1.2	Trust: 1.0
vendor:	f5	model:	big-ip global traffic manager	scope:	eq	version:	12.1.5	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	15.1.0	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	15.1.2	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	11.6.1	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	12.1.3	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	13.1.0	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	14.1.0	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	16.1.2	Trust: 1.0
vendor:	f5	model:	big-ip policy enforcement manager	scope:	eq	version:	15.1.1	Trust: 1.0
vendor:	f5	model:	big-ip link controller	scope:	eq	version:	14.1.0	Trust: 1.0
vendor:	f5	model:	big-ip access policy manager	scope:	eq	version:	12.1.0	Trust: 1.0
vendor:	f5	model:	big-ip local traffic manager	scope:	eq	version:	16.1.1	Trust: 1.0
vendor:	f5	model:	big-ip application security manager	scope:	eq	version:	12.1.1	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	11.6.1	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	14.1.2	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	13.1.0	Trust: 1.0
vendor:	f5	model:	big-ip domain name system	scope:	eq	version:	11.6.1	Trust: 1.0
vendor:	f5	model:	big-ip fraud protection service	scope:	eq	version:	16.1.1	Trust: 1.0
vendor:	f5	model:	big-ip analytics	scope:	eq	version:	11.6.1	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	eq	version:	12.1.5	Trust: 1.0
vendor:	f5	model:	big-ip advanced firewall manager	scope:	eq	version:	11.6.3	Trust: 1.0
vendor:	f5	model:	big-ip application acceleration manager	scope:	-	version:	-	Trust: 0.8
vendor:	f5	model:	big-ip global traffic manager	scope:	-	version:	-	Trust: 0.8
vendor:	f5	model:	big-ip application security manager	scope:	-	version:	-	Trust: 0.8
vendor:	f5	model:	big-ip link controller	scope:	-	version:	-	Trust: 0.8
vendor:	f5	model:	big-ip local traffic manager	scope:	-	version:	-	Trust: 0.8
vendor:	f5	model:	big-ip advanced firewall manager	scope:	-	version:	-	Trust: 0.8
vendor:	f5	model:	big-ip access policy manager	scope:	-	version:	-	Trust: 0.8
vendor:	f5	model:	big-ip fraud protection service	scope:	-	version:	-	Trust: 0.8
vendor:	f5	model:	big-ip analytics	scope:	-	version:	-	Trust: 0.8
vendor:	f5	model:	big-ip domain name system	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2022-010275 // NVD: CVE-2022-27189

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2022-27189
value:	HIGH
Trust: 1.0
f5sirt@f5.com:	CVE-2022-27189
value:	HIGH
Trust: 1.0
NVD:	CVE-2022-27189
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-202205-2044
value:	HIGH
Trust: 0.6
VULHUB:	VHN-419866
value:	MEDIUM
Trust: 0.1
VULMON:	CVE-2022-27189
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2022-27189
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
VULHUB:	VHN-419866
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2022-27189
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	3.6
version:	3.1
Trust: 2.0
OTHER:	JVNDB-2022-010275
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULHUB: VHN-419866 // VULMON: CVE-2022-27189 // JVNDB: JVNDB-2022-010275 // CNNVD: CNNVD-202205-2044 // NVD: CVE-2022-27189 // NVD: CVE-2022-27189

PROBLEMTYPE DATA

problemtype:	CWE-681	Trust: 1.1
problemtype:	Error in conversion between numeric types (CWE-681) [ others ]	Trust: 0.8

sources: VULHUB: VHN-419866 // JVNDB: JVNDB-2022-010275 // NVD: CVE-2022-27189

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202205-2044

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202205-2044

PATCH

title:	K16187341	url:	https://my.f5.com/manage/s/article/K16187341	Trust: 0.8
title:	F5 BIG-IP Security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=191359	Trust: 0.6

sources: JVNDB: JVNDB-2022-010275 // CNNVD: CNNVD-202205-2044

EXTERNAL IDS

db:	NVD	id:	CVE-2022-27189	Trust: 3.4
db:	JVNDB	id:	JVNDB-2022-010275	Trust: 0.8
db:	CNNVD	id:	CNNVD-202205-2044	Trust: 0.6
db:	CNVD	id:	CNVD-2022-77528	Trust: 0.1
db:	VULHUB	id:	VHN-419866	Trust: 0.1
db:	VULMON	id:	CVE-2022-27189	Trust: 0.1

sources: VULHUB: VHN-419866 // VULMON: CVE-2022-27189 // JVNDB: JVNDB-2022-010275 // CNNVD: CNNVD-202205-2044 // NVD: CVE-2022-27189

REFERENCES

url:	https://support.f5.com/csp/article/k16187341	Trust: 1.8
url:	https://nvd.nist.gov/vuln/detail/cve-2022-27189	Trust: 1.4
url:	https://cxsecurity.com/cveshow/cve-2022-27189/	Trust: 0.6
url:	https://vigilance.fr/vulnerability/f5-big-ip-overload-via-icap-profile-38216	Trust: 0.6
url:	https://cwe.mitre.org/data/definitions/681.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: VULHUB: VHN-419866 // VULMON: CVE-2022-27189 // JVNDB: JVNDB-2022-010275 // CNNVD: CNNVD-202205-2044 // NVD: CVE-2022-27189

SOURCES

db:	VULHUB	id:	VHN-419866
db:	VULMON	id:	CVE-2022-27189
db:	JVNDB	id:	JVNDB-2022-010275
db:	CNNVD	id:	CNNVD-202205-2044
db:	NVD	id:	CVE-2022-27189

LAST UPDATE DATE

2024-11-23T22:15:48.288000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-419866	date:	2022-05-13T00:00:00
db:	VULMON	id:	CVE-2022-27189	date:	2022-05-13T00:00:00
db:	JVNDB	id:	JVNDB-2022-010275	date:	2023-08-14T07:11:00
db:	CNNVD	id:	CNNVD-202205-2044	date:	2022-05-16T00:00:00
db:	NVD	id:	CVE-2022-27189	date:	2024-11-21T06:55:22.450

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-419866	date:	2022-05-05T00:00:00
db:	VULMON	id:	CVE-2022-27189	date:	2022-05-05T00:00:00
db:	JVNDB	id:	JVNDB-2022-010275	date:	2023-08-14T00:00:00
db:	CNNVD	id:	CNNVD-202205-2044	date:	2022-05-04T00:00:00
db:	NVD	id:	CVE-2022-27189	date:	2022-05-05T17:15:12.610