For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

pracaburo's avatar
pracaburo
Icon for Nimbostratus rankNimbostratus
Mar 31, 2023

F5 Rules for AWS WAF - List of CVE

I have checked the AWS WAF F5 rule - Common Vulnerabilities and Exposures (CVE) rule on the AWS marketplace, but is there a WAF rule that corresponds to the following CVE? - CVE-2022-24963(https://...
aws
cloud
cve
F5 Rules for AWS WAF
security
waf
Joel_Cohen's avatar
Joel_Cohen
Icon for Employee rankEmployee
Apr 03, 2023

Thes two CVEs correspon to Integer Overflows, which are attacks that can not really be mitigated with AWS rules. 

A common methon in application security for mitigating such attacks are size limits on paramters, for example.

That said, the F5 Rules for AWS WAF - CVE group does not have rules for the CVEs in question.

Thanks