CVE-2022-41832 HIGH

CVE-2022-41832: BIG-IP SIP vulnerability CVE-2022-41832

Vendor F5
Product BIG-IP
Weakness CWE-401
Published October 19, 2022
Last update May 8, 2025
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when a SIP profile is configured on a virtual server, undisclosed messages can cause an increase in memory resource utilization.

Key dates

02Disclosure timeline

October 19, 2022 CVE published
May 8, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-1023 Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx CVE-2026-35505 OFFIS DCMTK Toolkit Missing Release of Memory after Effective Lifetime CVE-2023-22414 Junos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processed CVE-2023-22410 Junos OS: MX Series with MPC10/MPC11: When Suspicious Control Flow Detection (scfd) is enabled and an attacker is sending specific traffic, this causes a memory leak. CVE-2019-14818