CVE-2020-27717

CVE-2020-27717 affects F5 BIG-IP DNS. The advisory states that undisclosed DNS requests may cause TMM to restart and generate a core file, causing a DoS in the data plane. Affected versions include BIG-IP DNS 16.0.0–16.0.0.1, 15.1.0–15.1.0.5, 14.1.0–14.1.3, 13.1.0–13.1.3.4, and 12.1.0–12.1.5.2. T...

CVE-2020-27717

On BIG-IP DNS 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.2, undisclosed series of DNS requests may cause TMM to restart and generate a core file...

CVE-2020-27714

On the BIG-IP AFM version 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5, when a Protocol Inspection Profile is attached to a FastL4 virtual server with the protocol field configured to either Other or All Protocols, the TMM may experience a restart if the profile processes non-TCP traffic...

CVE-2020-27714

CVE-2020-27714 affects BIG-IP AFM when a Protocol Inspection Profile is attached to a FastL4 virtual server and the protocol field is set to Other or All Protocols. The underlying issue causes the Traffic Management Microkernel (TMM) to restart if the profile processes non-TCP traffic, potentiall...

CVE-2020-27723

In versions 14.1.0-14.1.3 and 13.1.0-13.1.3.4, a BIG-IP APM virtual server processing PingAccess requests may lead to a restart of the Traffic Management Microkernel TMM process...

CVE-2020-27723

CVE-2020-27723 affects BIG-IP APM: a PingAccess request on a BIG-IP APM virtual server may trigger a restart of the Traffic Management Microkernel (TMM), disrupting traffic processing and causing a failover in HA. Affected versions include 14.1.0–14.1.3 and 13.1.0–13.1.3.4. Remediation per F5 adv...

CVE-2020-27716

On versions 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.5, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when a BIG-IP APM virtual server processes traffic of an undisclosed nature, the Traffic Management Microkernel TMM stops responding and restarts...

CVE-2020-27716

The CVE refers to a vulnerability in BIG-IP APM where, for BIG-IP versions 15.1.0–15.1.0.5, 14.1.0–14.1.3, 13.1.0–13.1.3.5, 12.1.0–12.1.5.2, and 11.6.1–11.6.5.2, processing traffic on an APM virtual server causes the Traffic Management Microkernel (TMM) to stop responding and restart, potentially...

CVE-2020-27724

In BIG-IP APM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, on systems running more than one TMM instance, authenticated VPN users may consume excessive resources by sending specially-crafted malicious traffic ove...

CVE-2020-27724

The CVE-2020-27724 entry concerns F5 BIG-IP APM with multiple TMM instances where authenticated VPN users can exhaust resources by sending crafted traffic through the VPN tunnel. Affected releases include BIG-IP APM 16.x (16.0.0–16.0.0.1), 15.x (15.1.0–15.1.0.4, 15.0.0–15.0.1.3), 14.x (14.1.0–14....

PT-2020-16776

Name of the Vulnerable Software and Affected Versions BIG-IP AFM versions 13.1.0 through 13.1.3.5 BIG-IP AFM versions 14.1.0 through 14.1.3 BIG-IP AFM versions 15.1.0 through 15.1.0.5 Description When a Protocol Inspection Profile is attached to a FastL4 virtual server with the protocol field...

PT-2020-16779

Name of the Vulnerable Software and Affected Versions BIG-IP DNS versions 12.1.0 through 12.1.5.2 BIG-IP DNS versions 13.1.0 through 13.1.3.4 BIG-IP DNS versions 14.1.0 through 14.1.3 BIG-IP DNS versions 15.1.0 through 15.1.0.5 BIG-IP DNS versions 16.0.0 through 16.0.0.1 Description An undisclose...

CVE-2020-27716: Undefined Security Weakness

On versions 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.5, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when a BIG-IP APM virtual server processes traffic of an undisclosed nature, the Traffic Management Microkernel TMM stops responding and restarts...

CVE-2020-27717: Undefined Security Weakness

On BIG-IP DNS 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.2, undisclosed series of DNS requests may cause TMM to restart and generate a core file...

CVE-2020-27714: Undefined Security Weakness

On the BIG-IP AFM version 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5, when a Protocol Inspection Profile is attached to a FastL4 virtual server with the protocol field configured to either Other or All Protocols, the TMM may experience a restart if the profile processes non-TCP traffic...

CVE-2020-27724: Uncontrolled Resource Consumption

In BIG-IP APM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, on systems running more than one TMM instance, authenticated VPN users may consume excessive resources by sending specially-crafted malicious traffic ove...

CVE-2020-27723: Undefined Security Weakness

In versions 14.1.0-14.1.3 and 13.1.0-13.1.3.4, a BIG-IP APM virtual server processing PingAccess requests may lead to a restart of the Traffic Management Microkernel TMM process...

PT-2020-16785

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 13.1.0 through 13.1.3.4 F5 BIG-IP versions 14.1.0 through 14.1.3 Description A processing issue with PingAccess requests on a BIG-IP APM virtual server may cause the Traffic Management Microkernel TMM process to restart...

PT-2020-16782

Name of the Vulnerable Software and Affected Versions BIG-IP LTM/CGNAT versions 13.1.0 through 13.1.3.5 BIG-IP LTM/CGNAT versions 14.1.0 through 14.1.3 BIG-IP LTM/CGNAT versions 15.1.0 through 15.1.0.5 BIG-IP LTM/CGNAT versions 16.0.0 through 16.0.0.1 Description The issue occurs when processing...

F5 BIG-IP APM Resource Management Error Vulnerability

F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. A resource management error vulnerability exists in F5 BIG-IP APM, which can be exploited by an attacker to trigger a denial of service via an...