CVE-2020-5941: High severity f5 access policy manager vulnerability

Q: What versions of F5 BIG-IP are affected by CVE-2020-5941?

F5 BIG-IP versions 16.0.0-16.0.0.1 and 15.1.0-15.1.0.5 are affected by CVE-2020-5941.

Q: What is the impact of CVE-2020-5941?

CVE-2020-5941 may cause the Traffic Management Microkernel (TMM) to generate a core file and restart.

Q: How can CVE-2020-5941 be mitigated?

To mitigate CVE-2020-5941, avoid using data exceeding the maximum limit of a hostname in the RESOLV::lookup command within an iRule.

Q: Is a fix available for CVE-2020-5941?

Yes, a fix for CVE-2020-5941 can be found in the subsequent releases following the affected versions.

Q: What command triggers the vulnerability in CVE-2020-5941?

The RESOLV::lookup command triggers the vulnerability in CVE-2020-5941 when used with excessive hostname data.

Published Nov 5, 2020

Updated

On BIG-IP versions 16.0.0-16.0.0.1 and 15.1.0-15.1.0.5, using the RESOLV::lookup command within an iRule may cause the Traffic Management Microkernel (TMM) to generate a core file and restart. This issue occurs when data exceeding the maximum limit of a hostname passes to the RESOLV::lookup command.

Affected Software

22 affected components

F5 BIG-IP Access Policy Manager>=15.1.0<15.1.1

F5 BIG-IP Access Policy Manager>=16.0.0<16.0.1

F5 BIG-IP Advanced Firewall Manager>=15.1.0<15.1.1

F5 BIG-IP Advanced Firewall Manager>=16.0.0<16.0.1

F5 BIG-IP Analytics>=15.1.0<15.1.1

F5 BIG-IP Analytics>=16.0.0<16.0.1

F5 Big-ip Application Acceleration Manager>=15.1.0<15.1.1

F5 Big-ip Application Acceleration Manager>=16.0.0<16.0.1

F5 BIG-IP Application Security Manager>=15.1.0<15.1.1

F5 BIG-IP Application Security Manager>=16.0.0<16.0.1

F5 Big-ip Domain Name System>=15.1.0<15.1.1

F5 Big-ip Domain Name System>=16.0.0<16.0.1

F5 Big-ip Fraud Protection Service>=15.1.0<15.1.1

F5 Big-ip Fraud Protection Service>=16.0.0<16.0.1

F5 Big-ip Global Traffic Manager>=15.1.0<15.1.1

F5 Big-ip Global Traffic Manager>=16.0.0<16.0.1

F5 Big-ip Link Controller>=15.1.0<15.1.1

F5 Big-ip Link Controller>=16.0.0<16.0.1

F5 Big-ip Local Traffic Manager>=15.1.0<15.1.1

F5 Big-ip Local Traffic Manager>=16.0.0<16.0.1

F5 Big-ip Policy Enforcement Manager>=15.1.0<15.1.1

F5 Big-ip Policy Enforcement Manager>=16.0.0<16.0.1

Event History

Nov 5, 2020

CVE Published

via MITRE·07:18 PM

Data Sourced

via MITRE·07:18 PM

DescriptionWeakness

Frequently Asked Questions

What versions of F5 BIG-IP are affected by CVE-2020-5941?

F5 BIG-IP versions 16.0.0-16.0.0.1 and 15.1.0-15.1.0.5 are affected by CVE-2020-5941.

What is the impact of CVE-2020-5941?

CVE-2020-5941 may cause the Traffic Management Microkernel (TMM) to generate a core file and restart.

How can CVE-2020-5941 be mitigated?