PT-2020-18760 · F5 · F5 Big-Ip

Published 2020-02-06 · Updated 2021-07-21 · CVE-2020-5856

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 14.1.0 through 14.1.2.2 F5 BIG-IP versions 15.0.0 through 15.0.1.1

Description The issue occurs when specifically crafted traffic is processed using the default 'xnet' driver on Virtual Edition instances hosted in Amazon Web Services (AWS), which may cause a TMM restart.

Recommendations For F5 BIG-IP versions 14.1.0 through 14.1.2.2, consider disabling the use of the default 'xnet' driver as a temporary workaround until a patch is available. For F5 BIG-IP versions 15.0.0 through 15.0.1.1, consider disabling the use of the default 'xnet' driver as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2020-5856

Affected Products

F5 Big-Ip

References · 4

• https://support.f5.com/csp/article/K00025388 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-5856 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5856 · Security Note
• https://t.me/cvenotify/850 · Telegram Post