All vulnerabilities

Servers and applications

CVE-2022-28705

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, on platforms with an ePVA and the pva.fwdaccel BigDB variable enabled, undisclosed requests to a virtual server with a FastL4 profile that has ePVA acceleration enabled can cause the Traffic Management Microkernel (TMM) process to terminate.…

Severity
High 7.5
Published
5 May 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_access_policy_manager
  • Version 17.0.0
  • Version 16.1.2
  • Version 16.1.1
  • Version 16.1.0
All 19 release lines
  • Version 13.1.0
  • Version 13.1.1
  • Version 13.1.3
  • Version 13.1.4
  • Version 13.1.5
  • Version 14.1.0
  • Version 14.1.2
  • Version 14.1.3
  • Version 14.1.4
  • Version 15.1.0
  • Version 15.1.1
  • Version 15.1.2
  • Version 15.1.3
  • Version 15.1.4
  • Version 15.1.5
  • Version 16.1.0
  • Version 16.1.1
  • Version 16.1.2
  • Version 17.0.0
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_local_traffic_manager
  • Version 17.0.0
  • Version 16.1.2
  • Version 16.1.1
  • Version 16.1.0
All 19 release lines
  • Version 13.1.0
  • Version 13.1.1
  • Version 13.1.3
  • Version 13.1.4
  • Version 13.1.5
  • Version 14.1.0
  • Version 14.1.2
  • Version 14.1.3
  • Version 14.1.4
  • Version 15.1.0
  • Version 15.1.1
  • Version 15.1.2
  • Version 15.1.3
  • Version 15.1.4
  • Version 15.1.5
  • Version 16.1.0
  • Version 16.1.1
  • Version 16.1.2
  • Version 17.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-28705
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-28705