For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

danielm1's avatar
danielm1
Icon for Cirrus rankCirrus
Dec 11, 2021

CVE-2021-44228 irule mitigation?

Hello there, Is there any iRule mitigation for the CVE-2021-44228? In support askf5 there is a mitigation using ASM but if I don't have it yet. Could I use an iRule?   Regards, Daniel
ASM Advanced WAF
LTM
security
broan's avatar
broan
Icon for Nimbostratus rankNimbostratus
Dec 13, 2021

I tried implementing the iRule linked from the AskF5 solution article, but as written it causes my site(s) to throw an HTTP 400 "Bad Request" error.

 

Anyone else see that behavior? Ideas?