PT-2020-18763 · F5 · Big-Ip

Published 2020-03-27 · Updated 2021-07-21 · CVE-2020-5862

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions BIG-IP versions 14.1.0 through 14.1.2.2 BIG-IP versions 15.0.0 through 15.0.1.1 BIG-IP versions 15.1.0 through 15.1.0.1

Description Under certain conditions, TMM may crash or stop processing new traffic with the DPDK/ENA driver on AWS systems while sending traffic. This issue is specific to AWS and does not affect any other platforms, hardware, or virtual, or any other cloud provider.

Recommendations For BIG-IP versions 14.1.0 through 14.1.2.2, consider disabling the DPDK/ENA driver on AWS systems as a temporary workaround until a patch is available. For BIG-IP versions 15.0.0 through 15.0.1.1, consider disabling the DPDK/ENA driver on AWS systems as a temporary workaround until a patch is available. For BIG-IP versions 15.1.0 through 15.1.0.1, consider disabling the DPDK/ENA driver on AWS systems as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2020-5862

Affected Products

Big-Ip

References · 4

• https://osv.dev/vulnerability/CVE-2020-5862 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5862 · Security Note
• https://support.f5.com/csp/article/K01054113 · Vendor Advisory
• https://t.me/cvenotify/2238 · Telegram Post