CVE-2022-23018 - AskarLabs CVE Database

CVE-2022-23018

Vendor N/A

Product BIG-IP AFM

Weakness CWE-755

Published January 25, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

On BIG-IP AFM version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and 13.1.x beginning in 13.1.3.4, when a virtual server is configured with both HTTP protocol security and HTTP Proxy Connect profiles, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Key dates

02Disclosure timeline

January 25, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-23018 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/755.html

Related vulnerabilities

04Related CVE

CVE-2024-32001 SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used CVE-2023-5824 Squid: dos against http and https CVE-2020-15223 Ignored storage errors on token revokation in ORY Fosite CVE-2024-39525 Junos OS and Junos OS Evolved: When BGP traceoptions is enabled, receipt of specially crafted BGP packet causes RPD crash CVE-2025-52948 Junos OS: Specific unknown traffic pattern causes FPC and system to crash when packet capturing is enabled