CVE-2020-5862

CVE-2020-5862 (BIG-IP, AWS/DPDK-ENA driver) affects BIG-IP on AWS where the DPDK/ENA driver is used. Under certain conditions, TMM may crash or stop processing traffic when sending traffic, potentially causing a DoS. This issue is specific to AWS due to the affected driver; other platforms/clouds...

CVE-2020-5861

On BIG-IP 12.1.0-12.1.5, the TMM process may produce a core file in some cases when Ram Cache incorrectly optimizes stored data resulting in memory errors...

CVE-2020-5861

The CVE-2020-5861 issue affects BIG-IP 12.1.0–12.1.5 where the TMM process may produce a core file due to Ram Cache misoptimizing stored data, causing memory errors and temporary traffic processing failures during TMM restart. The primary affected component is the Ram Cache feature within the Web...

CVE-2020-5859

Summary of CVE-2020-5859 (BIG-IP HTTP/3 QUIC vulnerability) : The issue affects BIG-IP with the HTTP/3 QUIC profile configured, where specially formatted HTTP/3 messages may cause TMM to crash (core dump) and potentially restart, disrupting traffic processing. Impact includes temporary traffic pr...

CVE-2020-5859

On BIG-IP 15.1.0.1, specially formatted HTTP/3 messages may cause TMM to produce a core file...

F5 Networks BIG-IP : BIG-IP HTTP/3 QUIC vulnerability (K61367237)

Specially formatted HTTP/3 messages may cause the Traffic Management Microkernel TMM to produce a core file. CVE-2020-5859 Impact TMM may restart and temporarily fail to process traffic on BIG-IP hosts with the HTTP/3 QUIC profile configured. High availability HA configurations will fail over the...

F5 Networks BIG-IP : BIG-IP TMM Ram Cache vulnerability (K22113131)

The TMM process may produce a core file in some cases when Ram Cache incorrectly optimizes stored data resulting in memory errors. RAM Cache is a BIG-IP feature used to accelerate HTTP traffic and can be enabled in a Web Acceleration profile. CVE-2020-5861 Impact The BIG-IP system temporarily fai...

F5 Networks BIG-IP : BIG-IP AWS vulnerability (K01054113)

Under certain conditions, while sending traffic, the Traffic Management Microkernel TMM may produce a core file or stop processing new traffic with the Data Plane Development Kit DPDK/Elastic Network Adapter ENA driver on Amazon Web Services AWS systems.CVE-2020-5862 Impact A remote attacker may ...

CVE-2020-5854

On BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.0-11.6.5.1, the tmm crashes under certain circumstances when using the connector profile if a specific sequence of connections are made...

CVE-2020-5856

On BIG-IP 15.0.0-15.0.1.1 and 14.1.0-14.1.2.2, while processing specifically crafted traffic using the default 'xnet' driver, Virtual Edition instances hosted in Amazon Web Services AWS may experience a TMM restart...

CVE-2020-5856

On BIG-IP 15.0.0-15.0.1.1 and 14.1.0-14.1.2.2, while processing specifically crafted traffic using the default 'xnet' driver, Virtual Edition instances hosted in Amazon Web Services AWS may experience a TMM restart...

Design/Logic Flaw

On BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.0-11.6.5.1, the tmm crashes under certain circumstances when using the connector profile if a specific sequence of connections are made...

Default configuration

On BIG-IP 15.0.0-15.0.1.1 and 14.1.0-14.1.2.2, while processing specifically crafted traffic using the default 'xnet' driver, Virtual Edition instances hosted in Amazon Web Services AWS may experience a TMM restart...

CVE-2020-5854

The CVE-2020-5854 issue affects BIG-IP TMM when using the connector profile, causing a core on specific connection sequences and temporary traffic processing failure post-restart, with device group failover risk. According to the F5 K50046200 advisory, vulnerable versions are BIG-IP TMM 11.6.0–11...

CVE-2020-5854

On BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.0-11.6.5.1, the tmm crashes under certain circumstances when using the connector profile if a specific sequence of connections are made...

CVE-2020-5856

CVE-2020-5856 affects BIG-IP Virtual Edition running 15.0.0–15.0.1.1 and 14.1.0–14.1.2.2. Processing crafted traffic with the default xnet driver may cause a TMM restart, leading to DoS on AWS-hosted VE deployments. The vulnerability is mitigated by upgrading to vulnerable-affected versions’ fixe...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K50046200)

The Traffic Management Microkernel TMM process may produce a core file when using the connector profile and a specific sequence of connections are received. CVE-2020-5854 Impact The BIG-IP system temporarily fails to process traffic as it recovers from a TMMrestart, and devices configured in a...

PT-2020-18758 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP versions 11.6.0 through 11.6.5.1 BIG-IP versions 12.1.0 through 12.1.5 BIG-IP versions 13.1.0 through 13.1.3.1 BIG-IP versions 14.0.0 through 14.0.1 BIG-IP versions 14.1.0 through 14.1.2.2 BIG-IP versions 15.0.0 through 15.0.1.1...

F5 Networks BIG-IP : BIG-IP TMM AWS vulnerability (K00025388)

While processing specifically crafted traffic using the default 'xnet' driver, BIG-IP Virtual Edition VE instances hosted in Amazon Web Services AWS may experience a Traffic Management Microkernel TMM restart. CVE-2020-5856 Impact A remote attacker may be able to perform a denial-of-service DoS...

CVE-2020-5852

The CVE affects BIG-IP’s Traffic Management Microkernel (TMM) when using a virtual server configured with a FastL4 profile. The vulnerability causes traffic processing disruption while TMM restarts and is limited to specific engineering hotfixes, not affecting major/minor/maintenance releases. Af...