K25400442 : TMM vulnerability CVE-2020-5931

2020-10-2800:00:00

my.f5.com

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.6%

JSON

Security Advisory Description

Virtual servers with a OneConnect profile may incorrectly handle WebSockets related HTTP response headers, causing the Traffic Management Microkernel (TMM) to restart. (CVE-2020-5931)

Impact

An attacker may be able to perform a denial-of-service (DoS) attack on a BIG-IP system by causing the TMM process to restart.

CPENameOperatorVersion
f5 ssl orchestratoreq14.1.0
f5 ssl orchestratoreq15.1.0
f5 ssl orchestratoreq15.1.1
f5 ssl orchestratoreq16.0.0
big-ip afmeq11.5.10
big-ip afmeq11.5.2
big-ip afmeq11.5.3
big-ip afmeq11.5.4
big-ip afmeq11.5.5
big-ip afmeq11.5.6

Name	Operator	Version
f5 ssl orchestrator	eq	14.1.0
f5 ssl orchestrator	eq	15.1.0
f5 ssl orchestrator	eq	15.1.1
f5 ssl orchestrator	eq	16.0.0
big-ip afm	eq	11.5.10
big-ip afm	eq	11.5.2
big-ip afm	eq	11.5.3
big-ip afm	eq	11.5.4
big-ip afm	eq	11.5.5
big-ip afm	eq	11.5.6

Rows per page:

1-10 of 3191