F5 Rules for AWS WAF - List of CVE

Question

I have checked the AWS WAF F5 rule - Common Vulnerabilities and Exposures (CVE) rule on the AWS marketplace, but is there a WAF rule that corresponds to the following CVE?- CVE-2022-24963(https://nvd.nist.gov/vuln/detail/CVE-2022-24963#match-8865215)- CVE-2022-25147(https://nvd.nist.gov/vuln/detail/CVE-2022-25147)

joel_cohen · Answer

Thes two CVEs correspon to Integer Overflows, which are attacks that&nbsp;can not really be mitigated with AWS rules.&nbsp;
A common methon in application security for mitigating such attacks are size limits on paramters, for example.
That said, the F5 Rules for AWS WAF - CVE group does not have rules for the CVEs in question.
Thanks

Forum Discussion

F5 Rules for AWS WAF - List of CVE

Recent Discussions

LTM - Connection limit not respected

F5 Next - how to reference irule procedures

R2600 device and tenant/partition configuration

Different SNAT for each member in the pool

Best practice to protect OWA

Related Content

AFM / Configuring rules within a rule list through REST

F5 Distributed Cloud Origin Server Subset Rules

F5 Rules for AWS WAF - List of CVE

F5 402 Exam reading list and notes

F5 Distributed Cloud Network Firewall Rule Evaluation and Packet Flow