CVE-2020-5861: Buffer Overflow
On BIG-IP 12.1.0-12.1.5, the TMM process may produce a core file in some cases when Ram Cache incorrectly optimizes stored data resulting in memory errors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-5861?
CVE-2020-5861 is considered a medium severity vulnerability that affects specific versions of F5 BIG-IP products.
How do I fix CVE-2020-5861?
To mitigate CVE-2020-5861, it is recommended to upgrade to the patched version of the affected F5 BIG-IP software.
Which products are affected by CVE-2020-5861?
CVE-2020-5861 affects F5 BIG-IP Access Policy Manager, Advanced Firewall Manager, Analytics, Application Acceleration Manager, Application Security Manager, Domain Name System, Fraud Protection Service, Global Traffic Manager, Link Controller, Local Traffic Manager, and Policy Enforcement Manager versions 12.1.0 to 12.1.5.
What is the risk of not addressing CVE-2020-5861?
Failing to address CVE-2020-5861 may lead to potential memory errors and instability of the TMM process resulting in service interruptions.
Is a configuration change required to resolve CVE-2020-5861?
No configuration changes are necessary to resolve CVE-2020-5861; upgrading to the fixed version is sufficient.