CVE-2020-5862

On BIG-IP 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.2, under certain conditions, TMM may crash or stop processing new traffic with the DPDK/ENA driver on AWS systems while sending traffic. This issue does not affect any other platforms, hardware or virtual, or any other cloud provider since the affected driver is specific to AWS.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
f5CNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
VendorProductVersion
f5big-ip_access_policy_manager
14.1.0 ≤
𝑥
≤ 14.1.2.2
f5big-ip_access_policy_manager
15.0.0 ≤
𝑥
≤ 15.0.1.1
f5big-ip_access_policy_manager
15.1.0 ≤
𝑥
≤ 15.1.0.1
f5big-ip_advanced_firewall_manager
14.1.0 ≤
𝑥
≤ 14.1.2
f5big-ip_advanced_firewall_manager
15.0.0 ≤
𝑥
≤ 15.0.1.1
f5big-ip_advanced_firewall_manager
15.1.0 ≤
𝑥
≤ 15.1.0.1
f5big-ip_analytics
14.1.0 ≤
𝑥
≤ 14.1.2
f5big-ip_analytics
15.0.0 ≤
𝑥
≤ 15.0.1.1
f5big-ip_analytics
15.1.0 ≤
𝑥
≤ 15.1.0.1
f5big-ip_application_acceleration_manager
14.1.0 ≤
𝑥
≤ 14.1.2
f5big-ip_application_acceleration_manager
15.0.0 ≤
𝑥
≤ 15.0.1.1
f5big-ip_application_acceleration_manager
15.1.0 ≤
𝑥
≤ 15.1.0.1
f5big-ip_application_security_manager
14.1.0 ≤
𝑥
≤ 14.1.2
f5big-ip_application_security_manager
15.0.0 ≤
𝑥
≤ 15.0.1.1
f5big-ip_application_security_manager
15.1.0 ≤
𝑥
≤ 15.1.0.1
f5big-ip_domain_name_system
14.1.0 ≤
𝑥
≤ 14.1.2
f5big-ip_domain_name_system
15.0.0 ≤
𝑥
≤ 15.0.1.1
f5big-ip_domain_name_system
15.1.0 ≤
𝑥
≤ 15.1.0.1
f5big-ip_fraud_protection_service
14.1.0 ≤
𝑥
≤ 14.1.2
f5big-ip_fraud_protection_service
15.0.0 ≤
𝑥
≤ 15.0.1.1
f5big-ip_fraud_protection_service
15.1.0 ≤
𝑥
≤ 15.1.0.1
f5big-ip_global_traffic_manager
14.1.0 ≤
𝑥
≤ 14.1.2
f5big-ip_global_traffic_manager
15.0.0 ≤
𝑥
≤ 15.0.1.1
f5big-ip_global_traffic_manager
15.1.0 ≤
𝑥
≤ 15.1.0.1
f5big-ip_link_controller
14.1.0 ≤
𝑥
≤ 14.1.2
f5big-ip_link_controller
15.0.0 ≤
𝑥
≤ 15.0.1.1
f5big-ip_link_controller
15.1.0 ≤
𝑥
≤ 15.1.0.1
f5big-ip_local_traffic_manager
14.1.0 ≤
𝑥
≤ 14.1.2
f5big-ip_local_traffic_manager
15.0.0 ≤
𝑥
≤ 15.0.1.1
f5big-ip_local_traffic_manager
15.1.0 ≤
𝑥
≤ 15.1.0.1
f5big-ip_policy_enforcement_manager
14.1.0 ≤
𝑥
≤ 14.1.2
f5big-ip_policy_enforcement_manager
15.0.0 ≤
𝑥
≤ 15.0.1.1
f5big-ip_policy_enforcement_manager
15.1.0 ≤
𝑥
≤ 15.1.0.1
𝑥
= Vulnerable software versions