CVE-2020-5862
BIG-IP
HIGH 7.5
At a glance
- Source
- NVD
- EPSS
- EPSS 1.10 % · percentile 65 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- f5
- NVD status
- Modified
Description
On BIG-IP 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.2, under certain conditions, TMM may crash or stop processing new traffic with the DPDK/ENA driver on AWS systems while sending traffic. This issue does not affect any other platforms, hardware or virtual, or any other cloud provider since the affected driver is specific to AWS.
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | MEDIUM 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2020-27016
- GCVE · GCVE-0-2020-5862
CERT-FR advisories
- CERTFR-2020-AVI-174 — Multiples vulnérabilités dans F5 BIG-IP · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*≥ 14.1.0 ≤ 14.1.2.2cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*≥ 15.0.0 ≤ 15.0.1.1cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*≥ 15.1.0 ≤ 15.1.0.1cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*≥ 14.1.0 ≤ 14.1.2cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*≥ 15.0.0 ≤ 15.0.1.1cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*≥ 15.1.0 ≤ 15.1.0.1cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*≥ 14.1.0 ≤ 14.1.2cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*≥ 15.0.0 ≤ 15.0.1.1cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*≥ 15.1.0 ≤ 15.1.0.1cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*≥ 14.1.0 ≤ 14.1.2cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*≥ 15.0.0 ≤ 15.0.1.1cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*≥ 15.1.0 ≤ 15.1.0.1cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*≥ 14.1.0 ≤ 14.1.2cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*≥ 15.0.0 ≤ 15.0.1.1cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*≥ 15.1.0 ≤ 15.1.0.1cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*≥ 14.1.0 ≤ 14.1.2cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*≥ 15.0.0 ≤ 15.0.1.1cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*≥ 15.1.0 ≤ 15.1.0.1cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*≥ 14.1.0 ≤ 14.1.2cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*≥ 15.0.0 ≤ 15.0.1.1cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*≥ 15.1.0 ≤ 15.1.0.1cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*≥ 14.1.0 ≤ 14.1.2cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*≥ 15.0.0 ≤ 15.0.1.1cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*≥ 15.1.0 ≤ 15.1.0.1cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*≥ 14.1.0 ≤ 14.1.2cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*≥ 15.0.0 ≤ 15.0.1.1cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*≥ 15.1.0 ≤ 15.1.0.1cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*≥ 14.1.0 ≤ 14.1.2cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*≥ 15.0.0 ≤ 15.0.1.1cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*≥ 15.1.0 ≤ 15.1.0.1cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*≥ 14.1.0 ≤ 14.1.2cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*≥ 15.0.0 ≤ 15.0.1.1cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*≥ 15.1.0 ≤ 15.1.0.1
Affected products
| Product | Versions |
|---|---|
| BIG-IP | affected 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, 14.1.0-14.1.2.2 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |