CVE-2020-5875

On BIG-IP 15.0.0-15.0.1 and 14.1.0-14.1.2.3, under certain conditions, the Traffic Management Microkernel TMM may generate a core file and restart while processing SSL traffic with an HTTP/2 full proxy...

CVE-2020-5874

On BIG-IP APM 15.0.0-15.0.1.2, 14.1.0-14.1.2.3, and 14.0.0-14.0.1, in certain circumstances, an attacker sending specifically crafted requests to a BIG-IP APM virtual server may cause a disruption of service provided by the Traffic Management MicrokernelTMM...

CVE-2020-5881

On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when the BIG-IP Virtual Edition VE is configured with VLAN groups and there are devices configured with OSPF connected to it, the Network Device Abstraction Layer NDAL Interfaces can lock up and in turn disrupting the communicatio...

CVE-2020-5882

On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5, and 11.6.1-11.6.5.1, under certain conditions, the Intel QuickAssist Technology QAT cryptography driver may produce a Traffic Management Microkernel TMM core file...

CVE-2020-5876

On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a race condition exists where mcpd and other processes may make unencrypted connection attempts to a new configuration sync peer. The race condition can occur when changing the ConfigSync IP address...

CVE-2020-5875

On BIG-IP 15.0.0-15.0.1 and 14.1.0-14.1.2.3, under certain conditions, the Traffic Management Microkernel TMM may generate a core file and restart while processing SSL traffic with an HTTP/2 full proxy...

CVE-2020-5875

CVE-2020-5875 affects BIG-IP TMM when HTTP/2 full proxy is used, potentially causing a core file and restart during SSL traffic processing. Affected: BIG-IP 15.0.0–15.0.1 and 14.1.0–14.1.2.3. Remediation per advisory: upgrade to versions listed as fixes — 15.1.0 for 15.x, and 14.1.2.42 (14.x) (no...

CVE-2020-5878

CVE-2020-5878 affects BIG-IP VE with the Traffic Management Microkernel (TMM). Affected versions: 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.3. The issue can cause TMM to restart while processing unusual IP traffic, potentially temporarily degrading traffic processing and causing HA fail...

CVE-2020-5874

CVE-2020-5874 affects BIG-IP APM virtual servers. In certain conditions, specially crafted requests may disrupt the Traffic Management Microkernel (TMM), enabling a DoS on the data plane when OpenID Connect is used. Affected releases include BIG-IP APM: 15.0.0–15.0.1.2, 14.1.0–14.1.2.3, and 14.0....

CVE-2020-5872

On BIG-IP 14.1.0-14.1.2.3, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.4.1, when processing TLS traffic with hardware cryptographic acceleration enabled on platforms with Intel QAT hardware, the Traffic Management Microkernel TMM may stop responding and cause a failover event...

CVE-2020-5872

On BIG-IP 14.1.0-14.1.2.3, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.4.1, when processing TLS traffic with hardware cryptographic acceleration enabled on platforms with Intel QAT hardware, the Traffic Management Microkernel TMM may stop responding and cause a failover event...

CVE-2020-5872

On BIG-IP 14.1.0-14.1.2.3, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.4.1, when processing TLS traffic with hardware cryptographic acceleration enabled on platforms with Intel QAT hardware, the Traffic Management Microkernel TMM may stop responding and cause a failover event...

CVE-2020-5872

CVE-2020-5872 affects BIG-IP devices where TLS processing uses Intel QAT hardware acceleration; the Traffic Management Microkernel (TMM) may stop responding, triggering a failover. Exploitation details are not provided in the connected documents, but Red Hat, ENISA and F5 advisories concur the is...

CVE-2020-5881: Undefined Security Weakness

On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when the BIG-IP Virtual Edition VE is configured with VLAN groups and there are devices configured with OSPF connected to it, the Network Device Abstraction Layer NDAL Interfaces can lock up and in turn disrupting the communicatio...

F5 Networks BIG-IP : TMM vulnerability (K35750231)

Traffic Management Microkernel TMMmay restart on BIG-IP Virtual Edition VEwhile processing unusual IP traffic.CVE-2020-5878 Impact The BIG-IP VE system may temporarily fail to process traffic as it recovers from a TMMrestart. If the BIG-IP VE system is configured for high availability HA, it fail...

F5 Networks BIG-IP : BIG-IP Virtual Edition TMM vulnerability (K73274382)

BIG-IP Virtual Edition VE may expose a mechanism for adjacent network layer 2 attackers to access local daemons and bypass port lockdown settings. CVE-2020-5888 Impact Hosts in adjacent networks may be able to bypass port lockdown settings on BIG-IP VE hosts. C Tenable Network Security, Inc. The...

CVE-2020-5882: Undefined Security Weakness

On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5, and 11.6.1-11.6.5.1, under certain conditions, the Intel QuickAssist Technology QAT cryptography driver may produce a Traffic Management Microkernel TMM core file...

PT-2020-18779

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Virtual Edition VE versions 14.1.0 through 14.1.2.3 F5 BIG-IP Virtual Edition VE versions 15.0.0 through 15.0.1.1 F5 BIG-IP Virtual Edition VE versions 15.1.0 through 15.1.0.1 Description The issue arises when Traffic Management...

PT-2020-18783

Name of the Vulnerable Software and Affected Versions BIG-IP versions 11.6.1 through 11.6.5.1 BIG-IP versions 12.1.0 through 12.1.5 BIG-IP versions 13.1.0 through 13.1.3.3 BIG-IP versions 14.1.0 through 14.1.2.3 BIG-IP versions 15.0.0 through 15.0.1.3 Description The Intel QuickAssist Technology...

F5 Networks BIG-IP : BIG-IP VE TMM vulnerability (K10251014)

BIG-IP Virtual Edition VE may expose a mechanism for remote attackers to access local daemons and bypass port lockdown settings. CVE-2020-5887 Impact The vulnerability can occur on BIG-IP VE systems with the following configuration : An IPv6 forwarding virtual server An IPv6 floating self IP...