K00025388 : BIG-IP TMM AWS vulnerability CVE-2020-5856

Security Advisory Description

While processing specifically crafted traffic using the default ‘xnet’ driver, BIG-IP Virtual Edition (VE) instances hosted in Amazon Web Services (AWS) may experience a Traffic Management Microkernel (TMM) restart. (CVE-2020-5856 )

Impact

A remote attacker may be able to perform a denial-of-service (DoS) attack on an AWS-hosted BIG-IP Virtual Edition (VE) system by causing the TMM process to restart.

BIG-IP VEs hosted in any other virtual environment, and hardware appliances, are not affected by this issue.