CVE-2020-5926
First published: Wed Aug 26 2020(Updated: )
In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, a BIG-IP virtual server with a Session Initiation Protocol (SIP) ALG profile, parsing SIP messages that contain a multi-part MIME payload with certain boundary strings can cause TMM to free memory to the wrong cache.
Credit: f5sirt@f5.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| F5 BIG-IP Access Policy Manager | >=14.1.0<14.1.2.7 | |
| F5 BIG-IP Access Policy Manager | >=15.0.0<15.0.1.4 | |
| F5 BIG-IP Access Policy Manager | >=15.1.0<15.1.0.5 | |
| F5 BIG-IP Advanced Firewall Manager | >=14.1.0<14.1.2.7 | |
| F5 BIG-IP Advanced Firewall Manager | >=15.0.0<15.0.1.4 | |
| F5 BIG-IP Advanced Firewall Manager | >=15.1.0<15.1.0.5 | |
| F5 BIG-IP Analytics | >=14.1.0<14.1.2.7 | |
| F5 BIG-IP Analytics | >=15.0.0<15.0.1.4 | |
| F5 BIG-IP Analytics | >=15.1.0<15.1.0.5 | |
| f5 big-ip application acceleration manager | >=14.1.0<14.1.2.7 | |
| f5 big-ip application acceleration manager | >=15.0.0<15.0.1.4 | |
| f5 big-ip application acceleration manager | >=15.1.0<15.1.0.5 | |
| F5 BIG-IP Application Security Manager | >=14.1.0<14.1.2.7 | |
| F5 BIG-IP Application Security Manager | >=15.0.0<15.0.1.4 | |
| F5 BIG-IP Application Security Manager | >=15.1.0<15.1.0.5 | |
| f5 big-ip domain name system | >=14.1.0<14.1.2.7 | |
| f5 big-ip domain name system | >=15.0.0<15.0.1.4 | |
| f5 big-ip domain name system | >=15.1.0<15.1.0.5 | |
| f5 big-ip fraud protection service | >=14.1.0<14.1.2.7 | |
| f5 big-ip fraud protection service | >=15.0.0<15.0.1.4 | |
| f5 big-ip fraud protection service | >=15.1.0<15.1.0.5 | |
| F5 BIG-IP Global Traffic Manager | >=14.1.0<14.1.2.7 | |
| F5 BIG-IP Global Traffic Manager | >=15.0.0<15.0.1.4 | |
| F5 BIG-IP Global Traffic Manager | >=15.1.0<15.1.0.5 | |
| f5 big-ip link controller | >=14.1.0<14.1.2.7 | |
| f5 big-ip link controller | >=15.0.0<15.0.1.4 | |
| f5 big-ip link controller | >=15.1.0<15.1.0.5 | |
| F5 BIG-IP Local Traffic Manager | >=14.1.0<14.1.2.7 | |
| F5 BIG-IP Local Traffic Manager | >=15.0.0<15.0.1.4 | |
| F5 BIG-IP Local Traffic Manager | >=15.1.0<15.1.0.5 | |
| F5 BIG-IP Policy Enforcement Manager | >=14.1.0<14.1.2.7 | |
| F5 BIG-IP Policy Enforcement Manager | >=15.0.0<15.0.1.4 | |
| F5 BIG-IP Policy Enforcement Manager | >=15.1.0<15.1.0.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-5926?
CVE-2020-5926 is classified as a high severity vulnerability.
How do I fix CVE-2020-5926?
To remediate CVE-2020-5926, upgrade to the versions provided by F5 that are not vulnerable.
What software is affected by CVE-2020-5926?
CVE-2020-5926 affects F5 BIG-IP Access Policy Manager, Advanced Firewall Manager, Analytics, Application Acceleration Manager, Application Security Manager, Domain Name System, Fraud Protection Service, Global Traffic Manager, Link Controller, Local Traffic Manager, and Policy Enforcement Manager.
What is the impact of CVE-2020-5926 on system performance?
CVE-2020-5926 can cause the Traffic Management Microkernel (TMM) to free memory incorrectly, potentially leading to performance degradation.
What types of payloads are involved in CVE-2020-5926?
CVE-2020-5926 is associated with SIP messages that contain a multi-part MIME payload with specific boundary strings.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/f5
- canonical/f5 big-ip access policy manager
- version/f5 big-ip access policy manager/14.1.0
- version/f5 big-ip access policy manager/15.0.0
- version/f5 big-ip access policy manager/15.1.0
- canonical/f5 big-ip advanced firewall manager
- version/f5 big-ip advanced firewall manager/14.1.0
- version/f5 big-ip advanced firewall manager/15.0.0
- version/f5 big-ip advanced firewall manager/15.1.0
- canonical/f5 big-ip analytics
- version/f5 big-ip analytics/14.1.0
- version/f5 big-ip analytics/15.0.0
- version/f5 big-ip analytics/15.1.0
- canonical/f5 big-ip application acceleration manager
- version/f5 big-ip application acceleration manager/14.1.0
- version/f5 big-ip application acceleration manager/15.0.0
- version/f5 big-ip application acceleration manager/15.1.0
- canonical/f5 big-ip application security manager
- version/f5 big-ip application security manager/14.1.0
- version/f5 big-ip application security manager/15.0.0
- version/f5 big-ip application security manager/15.1.0
- canonical/f5 big-ip domain name system
- version/f5 big-ip domain name system/14.1.0
- version/f5 big-ip domain name system/15.0.0
- version/f5 big-ip domain name system/15.1.0
- canonical/f5 big-ip fraud protection service
- version/f5 big-ip fraud protection service/14.1.0
- version/f5 big-ip fraud protection service/15.0.0
- version/f5 big-ip fraud protection service/15.1.0
- canonical/f5 big-ip global traffic manager
- version/f5 big-ip global traffic manager/14.1.0
- version/f5 big-ip global traffic manager/15.0.0
- version/f5 big-ip global traffic manager/15.1.0
- canonical/f5 big-ip link controller
- version/f5 big-ip link controller/14.1.0
- version/f5 big-ip link controller/15.0.0
- version/f5 big-ip link controller/15.1.0
- canonical/f5 big-ip local traffic manager
- version/f5 big-ip local traffic manager/14.1.0
- version/f5 big-ip local traffic manager/15.0.0
- version/f5 big-ip local traffic manager/15.1.0
- canonical/f5 big-ip policy enforcement manager
- version/f5 big-ip policy enforcement manager/14.1.0
- version/f5 big-ip policy enforcement manager/15.0.0
- version/f5 big-ip policy enforcement manager/15.1.0