CVE-2022-41787 - Vulnerability Details

Vendors	Products
F5	Big-ip Domain Name System Big-ip Local Traffic Manager

Link	Providers
https://support.f5.com/csp/article/K70569537

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2022-41787", "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab", "assignerShortName": "f5", "datePublished": "2022-10-19T21:22:36.379Z", "dateUpdated": "2025-05-06T18:52:18.250Z", "dateReserved": "2022-09-30T00:00:00.000Z"}, "containers": {"cna": {"title": "BIG-IP DNS Express vulnerability CVE-2022-41787", "datePublic": "2022-10-19T00:00:00.000Z", "providerMetadata": {"orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab", "shortName": "f5", "dateUpdated": "2022-10-19T00:00:00.000Z"}, "descriptions": [{"lang": "en", "value": "In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS queries with DNSSEC can cause TMM to terminate."}], "affected": [{"vendor": "F5", "product": "BIG-IP DNS", "versions": [{"version": "17.0.x", "status": "affected", "lessThan": "17.0.0.1", "versionType": "custom"}, {"version": "16.1.x", "status": "affected", "lessThan": "16.1.3.1", "versionType": "custom"}, {"version": "15.1.x", "status": "affected", "lessThan": "15.1.6.1", "versionType": "custom"}, {"version": "14.1.x", "status": "affected", "lessThan": "14.1.5.1", "versionType": "custom"}, {"version": "13.1.x", "status": "affected", "lessThan": "13.1.5.1", "versionType": "custom"}]}, {"vendor": "F5", "product": "BIG-IP LTM", "versions": [{"version": "17.0.x", "status": "affected", "lessThan": "17.0.0.1", "versionType": "custom"}, {"version": "16.1.x", "status": "affected", "lessThan": "16.1.3.1", "versionType": "custom"}, {"version": "15.1.x", "status": "affected", "lessThan": "15.1.6.1", "versionType": "custom"}, {"version": "14.1.x", "status": "affected", "lessThan": "14.1.5.1", "versionType": "custom"}, {"version": "13.1.x", "status": "affected", "lessThan": "13.1.5.1", "versionType": "custom"}]}], "references": [{"url": "https://support.f5.com/csp/article/K70569537"}], "credits": [{"lang": "en", "value": "This issue was discovered internally by F5."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-476 NULL Pointer Dereference", "cweId": "CWE-476"}]}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "source": {"discovery": "INTERNAL"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T12:49:43.826Z"}, "title": "CVE Program Container", "references": [{"url": "https://support.f5.com/csp/article/K70569537", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-05-06T18:49:22.257821Z", "id": "CVE-2022-41787", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-06T18:52:18.250Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2022-41787 (string)

assignerOrgId : 9dacffd4-cb11-413f-8451-fbbfd4ddc0ab (string)

assignerShortName : f5 (string)

datePublished : 2022-10-19T21:22:36.379Z (string)

dateUpdated : 2025-05-06T18:52:18.250Z (string)

dateReserved : 2022-09-30T00:00:00.000Z (string)

}

containers : { »

cna : { »

title : BIG-IP DNS Express vulnerability CVE-2022-41787 (string)

datePublic : 2022-10-19T00:00:00.000Z (string)

providerMetadata : { »

orgId : 9dacffd4-cb11-413f-8451-fbbfd4ddc0ab (string)

shortName : f5 (string)

dateUpdated : 2022-10-19T00:00:00.000Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS queries with DNSSEC can cause TMM to terminate. (string)

}

]

affected : [ »

0 : { »

vendor : F5 (string)

product : BIG-IP DNS (string)

versions : [ »

0 : { »

version : 17.0.x (string)

status : affected (string)

lessThan : 17.0.0.1 (string)

versionType : custom (string)

}

1 : { »

version : 16.1.x (string)

status : affected (string)

lessThan : 16.1.3.1 (string)

versionType : custom (string)

}

2 : { »

version : 15.1.x (string)

status : affected (string)

lessThan : 15.1.6.1 (string)

versionType : custom (string)

}

3 : { »

version : 14.1.x (string)

status : affected (string)

lessThan : 14.1.5.1 (string)

versionType : custom (string)

}

4 : { »

version : 13.1.x (string)

status : affected (string)

lessThan : 13.1.5.1 (string)

versionType : custom (string)

}

]

}

1 : { »

vendor : F5 (string)

product : BIG-IP LTM (string)

versions : [ »

0 : { »

version : 17.0.x (string)

status : affected (string)

lessThan : 17.0.0.1 (string)

versionType : custom (string)

}

1 : { »

version : 16.1.x (string)

status : affected (string)

lessThan : 16.1.3.1 (string)

versionType : custom (string)

}

2 : { »

version : 15.1.x (string)

status : affected (string)

lessThan : 15.1.6.1 (string)

versionType : custom (string)

}

3 : { »

version : 14.1.x (string)

status : affected (string)

lessThan : 14.1.5.1 (string)

versionType : custom (string)

}

4 : { »

version : 13.1.x (string)

status : affected (string)

lessThan : 13.1.5.1 (string)

versionType : custom (string)

}

]

}

]

references : [ »

0 : { »

url : https://support.f5.com/csp/article/K70569537 (string)

}

]

credits : [ »

0 : { »

lang : en (string)

value : This issue was discovered internally by F5. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

version : 3.1 (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

attackVector : NETWORK (string)

attackComplexity : LOW (string)

privilegesRequired : NONE (string)

userInteraction : NONE (string)

scope : UNCHANGED (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

lang : en (string)

description : CWE-476 NULL Pointer Dereference (string)

cweId : CWE-476 (string)

}

]

}

]

x_generator : { »

engine : Vulnogram 0.0.9 (string)

}

source : { »

discovery : INTERNAL (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T12:49:43.826Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://support.f5.com/csp/article/K70569537 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-05-06T18:49:22.257821Z (string)

id : CVE-2022-41787 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-05-06T18:52:18.250Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://support.f5.com/csp/article/K70569537", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T12:49:43.826Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-41787", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-05-06T18:49:22.257821Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-06T18:51:03.203Z"}}], "cna": {"title": "BIG-IP DNS Express vulnerability CVE-2022-41787", "source": {"discovery": "INTERNAL"}, "credits": [{"lang": "en", "value": "This issue was discovered internally by F5."}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "F5", "product": "BIG-IP DNS", "versions": [{"status": "affected", "version": "17.0.x", "lessThan": "17.0.0.1", "versionType": "custom"}, {"status": "affected", "version": "16.1.x", "lessThan": "16.1.3.1", "versionType": "custom"}, {"status": "affected", "version": "15.1.x", "lessThan": "15.1.6.1", "versionType": "custom"}, {"status": "affected", "version": "14.1.x", "lessThan": "14.1.5.1", "versionType": "custom"}, {"status": "affected", "version": "13.1.x", "lessThan": "13.1.5.1", "versionType": "custom"}]}, {"vendor": "F5", "product": "BIG-IP LTM", "versions": [{"status": "affected", "version": "17.0.x", "lessThan": "17.0.0.1", "versionType": "custom"}, {"status": "affected", "version": "16.1.x", "lessThan": "16.1.3.1", "versionType": "custom"}, {"status": "affected", "version": "15.1.x", "lessThan": "15.1.6.1", "versionType": "custom"}, {"status": "affected", "version": "14.1.x", "lessThan": "14.1.5.1", "versionType": "custom"}, {"status": "affected", "version": "13.1.x", "lessThan": "13.1.5.1", "versionType": "custom"}]}], "datePublic": "2022-10-19T00:00:00.000Z", "references": [{"url": "https://support.f5.com/csp/article/K70569537"}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "descriptions": [{"lang": "en", "value": "In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS queries with DNSSEC can cause TMM to terminate."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-476", "description": "CWE-476 NULL Pointer Dereference"}]}], "providerMetadata": {"orgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab", "shortName": "f5", "dateUpdated": "2022-10-19T00:00:00.000Z"}}}, "cveMetadata": {"cveId": "CVE-2022-41787", "state": "PUBLISHED", "dateUpdated": "2025-05-06T18:52:18.250Z", "dateReserved": "2022-09-30T00:00:00.000Z", "assignerOrgId": "9dacffd4-cb11-413f-8451-fbbfd4ddc0ab", "datePublished": "2022-10-19T21:22:36.379Z", "assignerShortName": "f5"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://support.f5.com/csp/article/K70569537 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T12:49:43.826Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2022-41787 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-05-06T18:49:22.257821Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-05-06T18:51:03.203Z (string)

}

]

cna : { »

title : BIG-IP DNS Express vulnerability CVE-2022-41787 (string)

source : { »

discovery : INTERNAL (string)

}

credits : [ »

0 : { »

lang : en (string)

value : This issue was discovered internally by F5. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 7.5 (number)

attackVector : NETWORK (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : NONE (string)

}

]

affected : [ »

0 : { »

vendor : F5 (string)

product : BIG-IP DNS (string)

versions : [ »

0 : { »

status : affected (string)

version : 17.0.x (string)

lessThan : 17.0.0.1 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 16.1.x (string)

lessThan : 16.1.3.1 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 15.1.x (string)

lessThan : 15.1.6.1 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 14.1.x (string)

lessThan : 14.1.5.1 (string)

versionType : custom (string)

}

4 : { »

status : affected (string)

version : 13.1.x (string)

lessThan : 13.1.5.1 (string)

versionType : custom (string)

}

]

}

1 : { »

vendor : F5 (string)

product : BIG-IP LTM (string)

versions : [ »

0 : { »

status : affected (string)

version : 17.0.x (string)

lessThan : 17.0.0.1 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 16.1.x (string)

lessThan : 16.1.3.1 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 15.1.x (string)

lessThan : 15.1.6.1 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 14.1.x (string)

lessThan : 14.1.5.1 (string)

versionType : custom (string)

}

4 : { »

status : affected (string)

version : 13.1.x (string)

lessThan : 13.1.5.1 (string)

versionType : custom (string)

}

]

}

]

datePublic : 2022-10-19T00:00:00.000Z (string)

references : [ »

0 : { »

url : https://support.f5.com/csp/article/K70569537 (string)

}

]

x_generator : { »

engine : Vulnogram 0.0.9 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS queries with DNSSEC can cause TMM to terminate. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-476 (string)

description : CWE-476 NULL Pointer Dereference (string)

}

]

}

]

providerMetadata : { »

orgId : 9dacffd4-cb11-413f-8451-fbbfd4ddc0ab (string)

shortName : f5 (string)

dateUpdated : 2022-10-19T00:00:00.000Z (string)

}

cveMetadata : { »

cveId : CVE-2022-41787 (string)

state : PUBLISHED (string)

dateUpdated : 2025-05-06T18:52:18.250Z (string)

dateReserved : 2022-09-30T00:00:00.000Z (string)

assignerOrgId : 9dacffd4-cb11-413f-8451-fbbfd4ddc0ab (string)

datePublished : 2022-10-19T21:22:36.379Z (string)

assignerShortName : f5 (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "F99148BC-ABF0-436F-AA6E-8ACEE8F8FB0C", "versionEndExcluding": "13.1.5.1", "versionStartIncluding": "13.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "BAE2D795-D387-46A5-ACD3-2D1B4AE2C2BE", "versionEndExcluding": "14.1.5.1", "versionStartIncluding": "14.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "FDC0EE80-B537-4061-8D25-7BEE1A8191DE", "versionEndExcluding": "15.1.6.1", "versionStartIncluding": "15.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "37684CEC-10C0-4B3C-B8F1-BBAAF3C08B61", "versionEndExcluding": "16.1.3.1", "versionStartIncluding": "16.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "80FD1CE8-448F-493A-A1FD-C71F73BC1DBC", "versionEndExcluding": "17.0.0.1", "versionStartIncluding": "17.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "978CE04B-13BD-479C-949D-4DEEB9C9C9CF", "versionEndExcluding": "13.1.5.1", "versionStartIncluding": "13.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "81F01E35-9B1F-4779-A807-1799ACBDE603", "versionEndExcluding": "14.1.5.1", "versionStartIncluding": "14.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "D0E7A929-53FF-482D-9935-E3B2E6C9D174", "versionEndExcluding": "15.1.6.1", "versionStartIncluding": "15.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "330DF580-A2F8-43A9-A73A-18DAE744352A", "versionEndExcluding": "16.1.3.1", "versionStartIncluding": "16.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "8DF1F656-90A5-409E-AB17-A4A6D45D0593", "versionEndExcluding": "17.0.0.1", "versionStartIncluding": "17.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS queries with DNSSEC can cause TMM to terminate."}, {"lang": "es", "value": "En BIG-IP versiones 17.0.x anteriores a 17.0.0.1, 16.1.x anteriores a 16.1.3.1, 15.1.x anteriores a 15.1.6.1, 14.1.x anteriores a 14.1.5.1 y 13.1.x anteriores a 13.1.5.1, cuando es configurado el perfil DNS en un servidor virtual con DNS Express habilitado, las consultas DNS no reveladas con DNSSEC pueden causar la finalizaci\u00f3n de TMM"}], "id": "CVE-2022-41787", "lastModified": "2024-11-21T07:23:50.670", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "f5sirt@f5.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-10-19T22:15:13.137", "references": [{"source": "f5sirt@f5.com", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://support.f5.com/csp/article/K70569537"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://support.f5.com/csp/article/K70569537"}], "sourceIdentifier": "f5sirt@f5.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-476"}], "source": "f5sirt@f5.com", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* (string)

matchCriteriaId : F99148BC-ABF0-436F-AA6E-8ACEE8F8FB0C (string)

versionEndExcluding : 13.1.5.1 (string)

versionStartIncluding : 13.1.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* (string)

matchCriteriaId : BAE2D795-D387-46A5-ACD3-2D1B4AE2C2BE (string)

versionEndExcluding : 14.1.5.1 (string)

versionStartIncluding : 14.1.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* (string)

matchCriteriaId : FDC0EE80-B537-4061-8D25-7BEE1A8191DE (string)

versionEndExcluding : 15.1.6.1 (string)

versionStartIncluding : 15.1.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 37684CEC-10C0-4B3C-B8F1-BBAAF3C08B61 (string)

versionEndExcluding : 16.1.3.1 (string)

versionStartIncluding : 16.1.0 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 80FD1CE8-448F-493A-A1FD-C71F73BC1DBC (string)

versionEndExcluding : 17.0.0.1 (string)

versionStartIncluding : 17.0.0 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 978CE04B-13BD-479C-949D-4DEEB9C9C9CF (string)

versionEndExcluding : 13.1.5.1 (string)

versionStartIncluding : 13.1.0 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 81F01E35-9B1F-4779-A807-1799ACBDE603 (string)

versionEndExcluding : 14.1.5.1 (string)

versionStartIncluding : 14.1.0 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : D0E7A929-53FF-482D-9935-E3B2E6C9D174 (string)

versionEndExcluding : 15.1.6.1 (string)

versionStartIncluding : 15.1.0 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 330DF580-A2F8-43A9-A73A-18DAE744352A (string)

versionEndExcluding : 16.1.3.1 (string)

versionStartIncluding : 16.1.0 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 8DF1F656-90A5-409E-AB17-A4A6D45D0593 (string)

versionEndExcluding : 17.0.0.1 (string)

versionStartIncluding : 17.0.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS queries with DNSSEC can cause TMM to terminate. (string)

}

1 : { »

lang : es (string)

value : En BIG-IP versiones 17.0.x anteriores a 17.0.0.1, 16.1.x anteriores a 16.1.3.1, 15.1.x anteriores a 15.1.6.1, 14.1.x anteriores a 14.1.5.1 y 13.1.x anteriores a 13.1.5.1, cuando es configurado el perfil DNS en un servidor virtual con DNS Express habilitado, las consultas DNS no reveladas con DNSSEC pueden causar la finalización de TMM (string)

}

]

id : CVE-2022-41787 (string)

lastModified : 2024-11-21T07:23:50.670 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : f5sirt@f5.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2022-10-19T22:15:13.137 (string)

references : [ »

0 : { »

source : f5sirt@f5.com (string)

tags : [ »

0 : Mitigation (string)

1 : Vendor Advisory (string)

]

url : https://support.f5.com/csp/article/K70569537 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mitigation (string)

1 : Vendor Advisory (string)

]

url : https://support.f5.com/csp/article/K70569537 (string)

}

]

sourceIdentifier : f5sirt@f5.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-476 (string)

}

]

source : f5sirt@f5.com (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object