PT-2020-18773 · F5+1 · F5 Big-Ip+1

Published 2020-04-30 · Updated 2020-05-06 · CVE-2020-5872

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 12.1.0 through 12.1.4.1 F5 BIG-IP versions 13.1.0 through 13.1.3.1 F5 BIG-IP versions 14.0.0 through 14.0.1 F5 BIG-IP versions 14.1.0 through 14.1.2.3

Description The issue occurs when processing TLS traffic with hardware cryptographic acceleration enabled on platforms with Intel QAT hardware. This can cause the Traffic Management Microkernel (TMM) to stop responding, resulting in a failover event.

Recommendations For versions 12.1.0 through 12.1.4.1, consider disabling hardware cryptographic acceleration on platforms with Intel QAT hardware until a patch is available. For versions 13.1.0 through 13.1.3.1, consider disabling hardware cryptographic acceleration on platforms with Intel QAT hardware until a patch is available. For versions 14.0.0 through 14.0.1, consider disabling hardware cryptographic acceleration on platforms with Intel QAT hardware until a patch is available. For versions 14.1.0 through 14.1.2.3, consider disabling hardware cryptographic acceleration on platforms with Intel QAT hardware until a patch is available.

Fix

Related Identifiers

CVE-2020-5872

Affected Products

F5 Big-Ip

Intel Qat

References · 4

• https://osv.dev/vulnerability/CVE-2020-5872 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5872 · Security Note
• https://support.f5.com/csp/article/K63558580 · Vendor Advisory
• https://t.me/cvenotify/3458 · Telegram Post