Design/Logic Flaw

On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.3, Traffic Management Microkernel TMM may restart on BIG-IP Virtual Edition VE while processing unusual IP traffic...

CVE-2020-5878

On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.3, Traffic Management Microkernel TMM may restart on BIG-IP Virtual Edition VE while processing unusual IP traffic...

CVE-2020-5878

On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.3, Traffic Management Microkernel TMM may restart on BIG-IP Virtual Edition VE while processing unusual IP traffic...

CVE-2020-5872

On BIG-IP 14.1.0-14.1.2.3, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.4.1, when processing TLS traffic with hardware cryptographic acceleration enabled on platforms with Intel QAT hardware, the Traffic Management Microkernel TMM may stop responding and cause a failover event...

PT-2020-31: Denial of service in F5 Traffic Management Microkernel (TMM)

Traffic Management Microkernel TMM stops responding and restarts while a BIG-IP APM virtual server processes traffic of unknown character. Advisory status: 30.04.2020 - Vendor notification date 17.12.2020 - Security advisory publication date https://support.f5.com/csp/article/K51574311 Credits: T...

PT-2020-18779

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Virtual Edition VE versions 14.1.0 through 14.1.2.3 F5 BIG-IP Virtual Edition VE versions 15.0.0 through 15.0.1.1 F5 BIG-IP Virtual Edition VE versions 15.1.0 through 15.1.0.1 Description The issue arises when Traffic Management...

PT-2020-18775

Name of the Vulnerable Software and Affected Versions BIG-IP APM versions 14.0.0 through 14.0.1 BIG-IP APM versions 14.1.0 through 14.1.2.3 BIG-IP APM versions 15.0.0 through 15.0.1.2 Description In certain circumstances, an attacker sending specifically crafted requests to a BIG-IP APM virtual...

PT-2020-18776

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 14.1.0 through 14.1.2.3 F5 BIG-IP versions 15.0.0 through 15.0.1 Description The Traffic Management Microkernel TMM may generate a core file and restart under certain conditions while processing SSL traffic with an HTTP/2 fu...

PT-2020-18773

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 12.1.0 through 12.1.4.1 F5 BIG-IP versions 13.1.0 through 13.1.3.1 F5 BIG-IP versions 14.0.0 through 14.0.1 F5 BIG-IP versions 14.1.0 through 14.1.2.3 Description The issue occurs when processing TLS traffic with hardware...

CVE-2020-5875: Undefined Security Weakness

On BIG-IP 15.0.0-15.0.1 and 14.1.0-14.1.2.3, under certain conditions, the Traffic Management Microkernel TMM may generate a core file and restart while processing SSL traffic with an HTTP/2 full proxy...

CVE-2020-5878: Undefined Security Weakness

On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.3, Traffic Management Microkernel TMM may restart on BIG-IP Virtual Edition VE while processing unusual IP traffic...

CVE-2020-5872: Undefined Security Weakness

On BIG-IP 14.1.0-14.1.2.3, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.4.1, when processing TLS traffic with hardware cryptographic acceleration enabled on platforms with Intel QAT hardware, the Traffic Management Microkernel TMM may stop responding and cause a failover event...

CVE-2020-5874: Undefined Security Weakness

On BIG-IP APM 15.0.0-15.0.1.2, 14.1.0-14.1.2.3, and 14.0.0-14.0.1, in certain circumstances, an attacker sending specifically crafted requests to a BIG-IP APM virtual server may cause a disruption of service provided by the Traffic Management MicrokernelTMM...

CVE-2020-5876: Cleartext Transmission of Sensitive Information

On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a race condition exists where mcpd and other processes may make unencrypted connection attempts to a new configuration sync peer. The race condition can occur when changing the ConfigSync IP address...

PT-2020-2034

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 15.1.0.1 Description The issue is related to the processing of specially formatted HTTP/3 messages, which may cause the Traffic Management Microkernel TMM to produce a core file. This is also associated with errors in handli...

CVE-2020-5852

Undisclosed traffic patterns received may cause a disruption of service to the Traffic Management Microkernel TMM. This vulnerability affects TMM through a virtual server configured with a FastL4 profile. Traffic processing is disrupted while TMM restarts. This issue only impacts specific...

CVE-2020-5852

Undisclosed traffic patterns received may cause a disruption of service to the Traffic Management Microkernel TMM. This vulnerability affects TMM through a virtual server configured with a FastL4 profile. Traffic processing is disrupted while TMM restarts. This issue only impacts specific...

Design/Logic Flaw

Undisclosed traffic patterns received may cause a disruption of service to the Traffic Management Microkernel TMM. This vulnerability affects TMM through a virtual server configured with a FastL4 profile. Traffic processing is disrupted while TMM restarts. This issue only impacts specific...

CVE-2020-5852

Undisclosed traffic patterns received may cause a disruption of service to the Traffic Management Microkernel TMM. This vulnerability affects TMM through a virtual server configured with a FastL4 profile. Traffic processing is disrupted while TMM restarts. This issue only impacts specific...

CVE-2020-5852

The CVE affects BIG-IP’s Traffic Management Microkernel (TMM) when using a virtual server configured with a FastL4 profile. The vulnerability causes traffic processing disruption while TMM restarts and is limited to specific engineering hotfixes, not affecting major/minor/maintenance releases. Af...