PT-2020-18779 · F5 · F5 Big-Ip Virtual Edition

Published 2020-04-30 · Updated 2020-05-05 · CVE-2020-5878

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Virtual Edition (VE) versions 14.1.0 through 14.1.2.3 F5 BIG-IP Virtual Edition (VE) versions 15.0.0 through 15.0.1.1 F5 BIG-IP Virtual Edition (VE) versions 15.1.0 through 15.1.0.1

Description The issue arises when Traffic Management Microkernel (TMM) processes unusual IP traffic, potentially causing it to restart.

Recommendations For versions 14.1.0 through 14.1.2.3, update to a version outside of this range to resolve the issue. For versions 15.0.0 through 15.0.1.1, update to a version outside of this range to resolve the issue. For versions 15.1.0 through 15.1.0.1, update to a version outside of this range to resolve the issue.

Fix

Related Identifiers

CVE-2020-5878

Affected Products

F5 Big-Ip Virtual Edition

References · 4

• https://support.f5.com/csp/article/K35750231 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5878 · Security Note
• https://osv.dev/vulnerability/CVE-2020-5878 · Vendor Advisory
• https://t.me/cvenotify/3465 · Telegram Post