K26244025: BIG-IP HTTP compression profile vulnerability CVE-2020-5933

🗓️ 21 Feb 2023 18:53:40Reported by f5Type

f5🔗 my.f5.com👁 27 Views

BIG-IP HTTP compression profile vulnerability CVE-2020-5933. Out-of-memory DoS risk due to Slowloris-style attack

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2020-5933	1 Nov 202013:43	–	circl
CNVD	F5 BIG-IP Denial of Service Vulnerability (CNVD-2020-74870)	29 Oct 202000:00	–	cnvd
CVE	CVE-2020-5933	29 Oct 202015:11	–	cve
Cvelist	CVE-2020-5933	29 Oct 202015:11	–	cvelist
EUVD	EUVD-2020-27087	7 Oct 202500:30	–	euvd
Tenable Nessus	F5 Networks BIG-IP : BIG-IP HTTP compression profile vulnerability (K26244025)	29 Oct 202000:00	–	nessus
NCSC	Vulnerabilities fixed in F5 BIG-IP	29 Oct 202000:00	–	ncsc
NVD	CVE-2020-5933	29 Oct 202016:15	–	nvd
Prion	Design/Logic Flaw	29 Oct 202016:15	–	prion
RedhatCVE	CVE-2020-5933	22 May 202516:44	–	redhatcve

Vulners

Node

f5 big-ip_ltmRange<16.0.0

OR

f5 big-ip_aamRange<16.0.0

OR

f5 big-ip_afmRange<16.0.0

OR

f5 big-ip_analyticsRange<16.0.0

OR

f5 big-ip_apmRange<16.0.0

OR

f5 big-ip_asmRange<16.0.0

OR

f5 big-ip_dnsRange<16.0.0

OR

f5 big-ip_fpsRange<16.0.0

OR

f5 big-ip_gtmRange<16.0.0

OR

f5 big-ip_link_controllerRange<16.0.0

OR

f5 big-ip_pemRange<16.0.0

OR

f5 big-ip_ltmRange15.1.0–15.1.1

OR

f5 big-ip_aamRange15.1.0–15.1.1

OR

f5 big-ip_afmRange15.1.0–15.1.1

OR

f5 big-ip_analyticsRange15.1.0–15.1.1

OR

f5 big-ip_apmRange15.1.0–15.1.1

OR

f5 big-ip_asmRange15.1.0–15.1.1

OR

f5 big-ip_dnsRange15.1.0–15.1.1

OR

f5 big-ip_fpsRange15.1.0–15.1.1

OR

f5 big-ip_gtmRange15.1.0–15.1.1

OR

f5 big-ip_link_controllerRange15.1.0–15.1.1

OR

f5 big-ip_pemRange15.1.0–15.1.1

OR

f5 big-ip_ltmRange14.1.0–14.1.2

OR

f5 big-ip_aamRange14.1.0–14.1.2

OR

f5 big-ip_afmRange14.1.0–14.1.2

OR

f5 big-ip_analyticsRange14.1.0–14.1.2

OR

f5 big-ip_apmRange14.1.0–14.1.2

OR

f5 big-ip_asmRange14.1.0–14.1.2

OR

f5 big-ip_dnsRange14.1.0–14.1.2

OR

f5 big-ip_fpsRange14.1.0–14.1.2

OR

f5 big-ip_gtmRange14.1.0–14.1.2

OR

f5 big-ip_link_controllerRange14.1.0–14.1.2

OR

f5 big-ip_pemRange14.1.0–14.1.2

OR

f5 big-ip_ltmRange13.1.0–13.1.3

OR

f5 big-ip_aamRange13.1.0–13.1.3

OR

f5 big-ip_afmRange13.1.0–13.1.3

OR

f5 big-ip_analyticsRange13.1.0–13.1.3

OR

f5 big-ip_apmRange13.1.0–13.1.3

OR

f5 big-ip_asmRange13.1.0–13.1.3

OR

f5 big-ip_dnsRange13.1.0–13.1.3

OR

f5 big-ip_fpsRange13.1.0–13.1.3

OR

f5 big-ip_gtmRange13.1.0–13.1.3

OR

f5 big-ip_link_controllerRange13.1.0–13.1.3

OR

f5 big-ip_pemRange13.1.0–13.1.3

OR

f5 big-ip_ltmRange12.1.0–12.1.5

OR

f5 big-ip_aamRange12.1.0–12.1.5

OR

f5 big-ip_afmRange12.1.0–12.1.5

OR

f5 big-ip_analyticsRange12.1.0–12.1.5

OR

f5 big-ip_apmRange12.1.0–12.1.5

OR

f5 big-ip_asmRange12.1.0–12.1.5

OR

f5 big-ip_dnsRange12.1.0–12.1.5

OR

f5 big-ip_fpsRange12.1.0–12.1.5

OR

f5 big-ip_gtmRange12.1.0–12.1.5

OR

f5 big-ip_link_controllerRange12.1.0–12.1.5

OR

f5 big-ip_pemRange12.1.0–12.1.5

OR

f5 big-ip_ltmRange11.6.1–11.6.5

OR

f5 big-ip_aamRange11.6.1–11.6.5

OR

f5 big-ip_afmRange11.6.1–11.6.5

OR

f5 big-ip_analyticsRange11.6.1–11.6.5

OR

f5 big-ip_apmRange11.6.1–11.6.5

OR

f5 big-ip_asmRange11.6.1–11.6.5

OR

f5 big-ip_dnsRange11.6.1–11.6.5

OR

f5 big-ip_fpsRange11.6.1–11.6.5

OR

f5 big-ip_gtmRange11.6.1–11.6.5

OR

f5 big-ip_link_controllerRange11.6.1–11.6.5

OR

f5 big-ip_pemRange11.6.1–11.6.5

21 Feb 2023 18:53Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

CVSS 27.8

EPSS0.00611

big-ip http compression vulnerability cve-2020-5933 out-of-memory dos slowloris-style attack