Forum Discussion

danielm1's avatar
danielm1
Icon for Cirrus rankCirrus
Dec 11, 2021

CVE-2021-44228 irule mitigation?

Hello there, Is there any iRule mitigation for the CVE-2021-44228? In support askf5 there is a mitigation using ASM but if I don't have it yet. Could I use an iRule?   Regards, Daniel
ASM Advanced WAF
LTM
security
Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP

Last update from my side. F5 has provided iRules to mitigate CVE-2021-44228 here: https://support.f5.com/csp/article/K19026212

Due to a more strict regex the F5 iRule will also protect you against the recently observed more obfuscated variants such as:

I'm done.

Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP
Dec 14, 2021

Hi @danielm,

 

usually I am not asking for this, but the Log4shell issue is kind of important.

Could you please mark this question as "Answered"? Under each answer there is "Select As Best", which is equivalent to "Answered". Just select my above answer as best. This way other community members can find the iRule mitigation for CVE-2021-44228 faster and easier.

 

Thanks in advance & KR

Daniel