CVE Feed

    Dashboard / CVE / CVE-2023-22839

    CVE-2023-22839

    On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all version of 13.1.x, when a DNS profile with the Rapid Response Mode setting enabled is configured on a virtual server with hardware SYN cookies enabled, undisclosed requests cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

    Published:Feb 1, 2023
    Last Modified:Mar 26, 2025
    EPS:Feb 1, 2023
    EPSS Score:0.00362
    CVSS Score:7.5

    Affected Products

    Vendor
    F5
    Product
    Big-ip 10000s
    Vendor
    F5
    Product
    Big-ip 10000s Firmware
    Vendor
    F5
    Product
    Big-ip 10200v
    Vendor
    F5
    Product
    Big-ip 10200v-ssl
    Vendor
    F5
    Product
    Big-ip 10200v-ssl Firmware
    Vendor
    F5
    Product
    Big-ip 10200v Firmware
    Vendor
    F5
    Product
    Big-ip 12000
    Vendor
    F5
    Product
    Big-ip 12000 Firmware
    Vendor
    F5
    Product
    Big-ip 5000s
    Vendor
    F5
    Product
    Big-ip 5000s Firmware
    Vendor
    F5
    Product
    Big-ip 5200v
    Vendor
    F5
    Product
    Big-ip 5200v-ssl
    Vendor
    F5
    Product
    Big-ip 5200v-ssl Firmware
    Vendor
    F5
    Product
    Big-ip 5200v Firmware
    Vendor
    F5
    Product
    Big-ip 7000s
    Vendor
    F5
    Product
    Big-ip 7000s Firmware
    Vendor
    F5
    Product
    Big-ip 7200v
    Vendor
    F5
    Product
    Big-ip 7200v-ssl
    Vendor
    F5
    Product
    Big-ip 7200v-ssl Firmware
    Vendor
    F5
    Product
    Big-ip 7200v Firmware
    Vendor
    F5
    Product
    Big-ip Domain Name System
    Vendor
    F5
    Product
    Big-ip I10600
    Vendor
    F5
    Product
    Big-ip I10600 Firmware
    Vendor
    F5
    Product
    Big-ip I10800
    Vendor
    F5
    Product
    Big-ip I10800 Firmware
    Vendor
    F5
    Product
    Big-ip I11600
    Vendor
    F5
    Product
    Big-ip I11600 Firmware
    Vendor
    F5
    Product
    Big-ip I11800
    Vendor
    F5
    Product
    Big-ip I11800 Firmware
    Vendor
    F5
    Product
    Big-ip I15600
    Vendor
    F5
    Product
    Big-ip I15600 Firmware
    Vendor
    F5
    Product
    Big-ip I15800
    Vendor
    F5
    Product
    Big-ip I15800 Firmware
    Vendor
    F5
    Product
    Big-ip I5600
    Vendor
    F5
    Product
    Big-ip I5600 Firmware
    Vendor
    F5
    Product
    Big-ip I5800
    Vendor
    F5
    Product
    Big-ip I5800 Firmware
    Vendor
    F5
    Product
    Big-ip I7600
    Vendor
    F5
    Product
    Big-ip I7600 Firmware
    Vendor
    F5
    Product
    Big-ip I7800
    Vendor
    F5
    Product
    Big-ip I7800 Firmware
    Vendor
    F5
    Product
    Big-ip Local Traffic Manager
    Vendor
    F5
    Product
    R10600
    Vendor
    F5
    Product
    R10600 Firmware
    Vendor
    F5
    Product
    R10800
    Vendor
    F5
    Product
    R10800 Firmware
    Vendor
    F5
    Product
    R10900
    Vendor
    F5
    Product
    R10900 Firmware
    Vendor
    F5
    Product
    R5600
    Vendor
    F5
    Product
    R5600 Firmware
    Vendor
    F5
    Product
    R5800
    Vendor
    F5
    Product
    R5800 Firmware
    Vendor
    F5
    Product
    R5900
    Vendor
    F5
    Product
    R5900 Firmware
    Vendor
    F5
    Product
    Velos Bx110
    Vendor
    F5
    Product
    Velos Bx110 Firmware
    Vendor
    F5
    Product
    Viprion B2100
    Vendor
    F5
    Product
    Viprion B2100 Firmware
    Vendor
    F5
    Product
    Viprion B2150
    Vendor
    F5
    Product
    Viprion B2150 Firmware
    Vendor
    F5
    Product
    Viprion B2250
    Vendor
    F5
    Product
    Viprion B2250 Firmware
    Vendor
    F5
    Product
    Viprion B4300
    Vendor
    F5
    Product
    Viprion B4300 Firmware
    Vendor
    F5
    Product
    Viprion B4450
    Vendor
    F5
    Product
    Viprion B4450 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-476 NULL Pointer Dereference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High