CVE-2020-27713

published 2020-12-11

CVE-2020-27713: In certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied to a virtual server and the BIG-IP system receives a request…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

In certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied to a virtual server and the BIG-IP system receives a request with specific characteristics, the connection is reset and the Traffic Management Microkernel (TMM) leaks memory.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
f5	big-ip_advanced_firewall_manager	—	—
f5	big-ip_afm	—	—

CWE-401