cbcvebase.
CVE-2021-23048
published 2021-09-14

CVE-2021-23048: On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, when…

high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, when GPRS Tunneling Protocol (GTP) iRules commands or a GTP profile is configured on a virtual server, undisclosed GTP messages can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected

78 ranges· showing 25
VendorProductVersion rangeFixed in
f5big-ip_aam
f5big-ip_access_policy_manager
f5big-ip_access_policy_manager11.6.1 – 11.6.5
f5big-ip_access_policy_manager12.1.0 – 12.1.6
f5big-ip_access_policy_manager>= 13.1.0 < 13.1.4.113.1.4.1
f5big-ip_access_policy_manager>= 14.1.0 < 14.1.4.314.1.4.3
f5big-ip_access_policy_manager>= 15.1.0 < 15.1.3.115.1.3.1
f5big-ip_access_policy_manager>= 16.0.0 < 16.0.1.216.0.1.2
f5big-ip_advanced_firewall_manager11.6.1 – 11.6.5
f5big-ip_advanced_firewall_manager12.1.0 – 12.1.6
f5big-ip_advanced_firewall_manager>= 13.1.0 < 13.1.4.113.1.4.1
f5big-ip_advanced_firewall_manager>= 14.1.0 < 14.1.4.314.1.4.3
f5big-ip_advanced_firewall_manager>= 15.1.0 < 15.1.3.115.1.3.1
f5big-ip_advanced_firewall_manager>= 16.0.0 < 16.0.1.216.0.1.2
f5big-ip_advanced_waf
f5big-ip_advanced_web_application_firewall11.6.1 – 11.6.5
f5big-ip_advanced_web_application_firewall12.1.0 – 12.1.6
f5big-ip_advanced_web_application_firewall>= 13.1.0 < 13.1.4.113.1.4.1
f5big-ip_advanced_web_application_firewall>= 14.1.0 < 14.1.4.314.1.4.3
f5big-ip_advanced_web_application_firewall>= 15.1.0 < 15.1.3.115.1.3.1
f5big-ip_advanced_web_application_firewall>= 16.0.0 < 16.0.1.216.0.1.2
f5big-ip_afm
f5big-ip_analytics
f5big-ip_analytics11.6.1 – 11.6.5
f5big-ip_analytics12.1.0 – 12.1.6