PT-2020-2036 · F5 · Big-Ip
Published
2020-03-27
·
Updated
2021-07-21
·
CVE-2020-5857
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
BIG-IP versions 11.5.2 through 11.6.5.1
BIG-IP versions 12.1.0 through 12.1.5
BIG-IP versions 13.1.0 through 13.1.3.1
BIG-IP versions 14.1.0 through 14.1.2.2
BIG-IP versions 15.0.0 through 15.0.1
Description
The issue is related to undisclosed HTTP behavior that may lead to a denial of service. It is also associated with errors in processing input data, which can be exploited by a remote attacker to cause a denial of service.
Recommendations
For BIG-IP versions 11.5.2 through 11.6.5.1, update to a version outside of this range to resolve the issue.
For BIG-IP versions 12.1.0 through 12.1.5, update to a version outside of this range to resolve the issue.
For BIG-IP versions 13.1.0 through 13.1.3.1, update to a version outside of this range to resolve the issue.
For BIG-IP versions 14.1.0 through 14.1.2.2, update to a version outside of this range to resolve the issue.
For BIG-IP versions 15.0.0 through 15.0.1, update to a version outside of this range to resolve the issue.
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Big-Ip