imPC@ndo IT

Tracker / CVE-2020-5946

CVE-2020-5946

High 7.5

In BIG-IP Advanced WAF and FPS versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, under some circumstances, certain format client-side alerts sent to the BIG-IP virtual server configured with DataSafe may cause the Traffic Management Microkernel (TMM) to restart, resulting in a Denial-of-Service (DoS).

Affected products and versions

f5 big-ip_advanced_web_application_firewall · 14.1.0 → 14.1.2.8
f5 big-ip_advanced_web_application_firewall · 15.1.0 → 15.1.1
f5 big-ip_advanced_web_application_firewall · 16.0.0 → 16.0.1
f5 big-ip_fraud_protection_service · 14.1.0 → 14.1.2.8
f5 big-ip_fraud_protection_service · 15.1.0 → 15.1.1
f5 big-ip_fraud_protection_service · 16.0.0 → 16.0.1

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References