K58494243 : BIG-IP HTTP/2 vulnerability CVE-2020-5891

Security Advisory Description

Undisclosed HTTP/2 requests can lead to a denial of service when sent to a virtual server configured with the Fallback Host setting and a server-side HTTP/2 profile. (CVE-2020-5891)

Impact

The Traffic Management Microkernel (TMM) may generate a core file and restart, causing a traffic disruption or failover event. This vulnerability affects only virtual servers with the Fallback Host setting configured and a server-side HTTP/2 profile assigned.