Denial-of-Service Vulnerability in F5 BIG-IQ Data Collection Device

CVE-2021-22996

What is CVE-2021-22996?

A vulnerability in F5 BIG-IQ Data Collection Device 7.x versions can trigger a denial-of-service scenario when the cluster is configured for auto failover. This issue arises when a cluster member receives a particular undisclosed message, causing the corosync process to abort. As a result, the stability and availability of the BIG-IQ high availability cluster may be compromised, potentially affecting operational continuity.

References