K82530456 : BIG-IP Diameter vulnerability CVE-2020-5942

Security Advisory Description

When processing Capabilities-Exchange-Answer (CEA) packets with certain attributes from the Policy and Charging Rules Function (PCRF) server, the Traffic Management Microkernel (TMM) may generate a core file and restart. (CVE-2020-5942)

Impact

This vulnerability affects only virtual servers configured with the Diameter Endpoint profile with Gx capability to connect to a PCRF. When attackers exploit the vulnerability, TMM creates a core file and restarts. As a result, the BIG-IP system fails to process traffic and fails over to its high availability (HA) peer, if configured.