CVE-2020-5898

In versions 7.1.5-7.1.9, BIG-IP Edge Client Windows Stonewall driver does not sanitize the pointer received from the userland. A local user on the Windows client system can send crafted DeviceIoControl requests to \\.\urvpndrv device causing the Windows kernel to crash...

K69154630: BIG-IP Edge Client for Windows vulnerability CVE-2020-5898

Security Advisory Description The BIG-IP Edge Client Windows Stonewall driver does not sanitize the pointer received from the userland. A local user on the Windows client system can send crafted DeviceIoControl requests to a \\.\urvpndrv device causing the Windows kernel to crash. CVE-2020-5898...

CVE-2020-5898

The CVE-2020-5898 issue affects BIG-IP Edge Client Windows Stonewall driver (versions 7.1.5–7.1.9). The root cause is improper sanitization of a userland pointer, enabling a local attacker to send crafted DeviceIoControl requests to \.\ urvpndrv, leading to a Windows kernel crash (DoS). According...