Forum Discussion

pracaburo's avatar
pracaburo
Icon for Nimbostratus rankNimbostratus
Mar 31, 2023

F5 Rules for AWS WAF - List of CVE

I have checked the AWS WAF F5 rule - Common Vulnerabilities and Exposures (CVE) rule on the AWS marketplace, but is there a WAF rule that corresponds to the following CVE? - CVE-2022-24963(https://...
AWS
cloud
cve
F5 Rules for AWS WAF
security
waf
Joel_Cohen's avatar
Joel_Cohen
Icon for Employee rankEmployee
Apr 03, 2023

Thes two CVEs correspon to Integer Overflows, which are attacks that can not really be mitigated with AWS rules. 

A common methon in application security for mitigating such attacks are size limits on paramters, for example.

That said, the F5 Rules for AWS WAF - CVE group does not have rules for the CVEs in question.

Thanks