CVE-2020-27720: High severity f5 big-ip carrier-grade nat vulnerability
On BIG-IP LTM/CGNAT version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5, when processing NAT66 traffic with Port Block Allocation (PBA) mode and SP-DAG enabled, and dag-ipv6-prefix-len configured with a value less than the default of 128, an undisclosed traffic pattern may cause the Traffic Management Microkernel (TMM) to restart.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-27720?
The severity of CVE-2020-27720 is high with a severity value of 7.5.
Which versions of BIG-IP LTM/CGNAT are affected by CVE-2020-27720?
BIG-IP LTM/CGNAT versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5 are affected by CVE-2020-27720.
What is the problem with CVE-2020-27720?
CVE-2020-27720 is related to an undisclosed traffic pattern that can occur when processing NAT66 traffic with Port Block Allocation (PBA) mode and SP-DAG enabled, and dag-ipv6-prefix-len configured with a value less than the default of 128.
How can I fix CVE-2020-27720?
To fix CVE-2020-27720, ensure that you have updated BIG-IP LTM/CGNAT to a version that is not affected by this vulnerability.
Where can I find more information about CVE-2020-27720?
You can find more information about CVE-2020-27720 on the F5 Networks support website.