PT-2020-16787 · F5+1 · F5 Big-Ip Dns+5
Published
2020-12-24
·
Updated
2021-07-21
·
CVE-2020-27725
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
F5 BIG-IP DNS, GTM, and Link Controller versions 11.6.1 through 11.6.5.2
F5 BIG-IP DNS, GTM, and Link Controller versions 12.1.0 through 12.1.5.2
F5 BIG-IP DNS, GTM, and Link Controller versions 13.1.0 through 13.1.3.4
F5 BIG-IP DNS, GTM, and Link Controller versions 14.1.0 through 14.1.3
F5 BIG-IP DNS, GTM, and Link Controller versions 15.1.0 through 15.1.0.5
Description
The issue is related to a memory leak in the zxfrd component when listing DNS zones. This can be triggered by users with access to services like TMSH, iControl, or SNMP.
Recommendations
For versions 11.6.1 through 11.6.5.2, update to a version that includes a fix for the memory leak issue.
For versions 12.1.0 through 12.1.5.2, update to a version that includes a fix for the memory leak issue.
For versions 13.1.0 through 13.1.3.4, update to a version that includes a fix for the memory leak issue.
For versions 14.1.0 through 14.1.3, update to a version that includes a fix for the memory leak issue.
For versions 15.1.0 through 15.1.0.5, update to a version that includes a fix for the memory leak issue.
Fix
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
F5 Big-Ip Dns
F5 Big-Ip Gtm
F5 Big-Ip Link Controller
Snmp
Tmsh
Icontrol