K00103216 : BIG-IP VIPRION MCPD vulnerability CVE-2020-5921

Security Advisory Description

SYN flood causes a large number of MCPD context messages destined to secondary blades consuming memory and leading to MCPD failure. (CVE-2020-5921)

Impact

This issue affects only VIPRION hosts with two or more blades installed, including those with Virtual Clustered Multiprocessing (vCMP) provisioned. vCMP guests are also affected when running on VIPRION hosts with two or more blades installed. Single-blade VIPRION hosts are not affected.

The mcpd process progressively consumes excessive memory, leading to slow response times, and eventually themcpd process will fail. If another BIG-IP system is configured in a high availability (HA) group, a failover occurs.