CVE-2016-7472 — Improper Input Validation in Networks INC Big-ip ASM

CWE-20 — Improper Input Validation5 documents5 sources
Severity
7.5HIGHNVD
EPSS
9.1%
top 7.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
F5 Networks INC Big-ip ASMF5 Big-ip Application Security Manager
Timeline
PublishedApr 3
Latest updateMay 14

Description

F5 BIG-IP ASM version 12.1.0 - 12.1.1 may allow remote attackers to cause a denial of service (DoS) via a crafted HTTP request.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5f5_networks_inc/big-ip_asm12.1.0 - 12.1.1

🔴Vulnerability Details

3
GHSA
GHSA-863x-3737-h6q4: F5 BIG-IP ASM version 12↗2022-05-14
▶
CVEList
CVE-2016-7472: F5 BIG-IP ASM version 12↗2018-04-03
▶
Kernel
Merge tag 'keys-fixes-20170419' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs↗2017-04-20
▶

📋Vendor Advisories

1
F5
CVE-2016-7472: F5 BIG-IP ASM version 12↗2018-04-03
▶
CVE-2016-7472 — Improper Input Validation | cvebase