Buffer overflow in F5 Networks products - CVE-2021-22991

Vulnerability identifier: #VU51422

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-22991

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing HTTP requests within the Traffic Management Microkernel (TMM) URI normalization feature. A remote attacker can create a specially crafted HTTP request to the virtual server associated with an HTTP profile, trigger memory corruption and crash the service or execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

BIG-IP APM
BIG-IP GTM
BIG-IP AFM
BIG-IP LTM
BIG-IP ASM
BIG-IP Analytics
BIG-IP PEM
BIG-IP FPS
BIG-IP DDHD
BIG-IP SSLO
BIG-IP
BIG-IP Advanced WAF
BIG-IP DNS
BIG-IP Link Controller
BIG-IP AAM

Install updates from vendor's website.

BIG-IP APM - addressed in versions 12.1.5.3, 13.1.3.6, 14.1.4, 15.1.2.1, 16.0.1.1
BIG-IP GTM - addressed in versions 12.1.5.3, 13.1.3.6, 14.1.4, 15.1.2.1, 16.0.1.1
BIG-IP AFM - addressed in versions 12.1.5.3, 13.1.3.6, 14.1.4, 15.1.2.1, 16.0.1.1
BIG-IP DDHD - addressed in versions 12.1.5.3, 13.1.3.6, 14.1.4, 15.1.2.1, 16.0.1.1
BIG-IP SSLO - addressed in versions 12.1.5.3, 13.1.3.6, 14.1.4, 15.1.2.1, 16.0.1.1
BIG-IP LTM - addressed in versions 12.1.5.3, 13.1.3.6, 14.1.4, 15.1.2.1, 16.0.1.1
BIG-IP - addressed in versions 12.1.5.3, 13.1.3.6, 14.1.4, 15.1.2.1, 16.0.1.1
BIG-IP ASM - addressed in versions 12.1.5.3, 13.1.3.6, 14.1.4, 15.1.2.1, 16.0.1.1
BIG-IP Analytics - addressed in versions 12.1.5.3, 13.1.3.6, 14.1.4, 15.1.2.1, 16.0.1.1
BIG-IP Advanced WAF - addressed in versions 12.1.5.3, 13.1.3.6, 14.1.4, 15.1.2.1, 16.0.1.1
BIG-IP DNS - addressed in versions 12.1.5.3, 13.1.3.6, 14.1.4, 15.1.2.1, 16.0.1.1
BIG-IP PEM - addressed in versions 12.1.5.3, 13.1.3.6, 14.1.4, 15.1.2.1, 16.0.1.1
BIG-IP Link Controller - addressed in versions 12.1.5.3, 13.1.3.6, 14.1.4, 15.1.2.1, 16.0.1.1
BIG-IP FPS - addressed in versions 12.1.5.3, 13.1.3.6, 14.1.4, 15.1.2.1, 16.0.1.1
BIG-IP AAM - addressed in versions 12.1.5.3, 13.1.3.6, 14.1.4, 15.1.2.1, 16.0.1.1

• https://support.f5.com/csp/article/K56715231

• Buffer overflow in F5 BIG-IP TMM