cbcvebase.
CVE-2020-5935
published 2020-10-29

CVE-2020-5935: On BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, FPS, GTM, Link Controller, PEM) versions 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when…

medium5.9CVSS 3.1
AVNACHPRNUINSUCNINAH
On BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, FPS, GTM, Link Controller, PEM) versions 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when handling MQTT traffic through a BIG-IP virtual server associated with an MQTT profile and an iRule performing manipulations on that traffic, TMM may produce a core file.

Affected

44 ranges· showing 25
VendorProductVersion rangeFixed in
f5big-ip_aam——
f5big-ip_access_policy_manager>= 13.1.0 < 13.1.3.413.1.3.4
f5big-ip_access_policy_manager>= 14.1.0 < 14.1.2.414.1.2.4
f5big-ip_access_policy_manager>= 15.0.0 < 15.1.115.1.1
f5big-ip_advanced_firewall_manager>= 13.1.0 < 13.1.3.413.1.3.4
f5big-ip_advanced_firewall_manager>= 14.1.0 < 14.1.2.414.1.2.4
f5big-ip_advanced_firewall_manager>= 15.0.0 < 15.1.115.1.1
f5big-ip_afm——
f5big-ip_analytics——
f5big-ip_analytics>= 13.1.0 < 13.1.3.413.1.3.4
f5big-ip_analytics>= 14.1.0 < 14.1.2.414.1.2.4
f5big-ip_analytics>= 15.0.0 < 15.1.115.1.1
f5big-ip_apm——
f5big-ip_application_acceleration_manager>= 13.1.0 < 13.1.3.413.1.3.4
f5big-ip_application_acceleration_manager>= 14.1.0 < 14.1.2.414.1.2.4
f5big-ip_application_acceleration_manager>= 15.0.0 < 15.1.115.1.1
f5big-ip_application_security_manager>= 13.1.0 < 13.1.3.413.1.3.4
f5big-ip_application_security_manager>= 14.1.0 < 14.1.2.414.1.2.4
f5big-ip_application_security_manager>= 15.0.0 < 15.1.115.1.1
f5big-ip_asm——
f5big-ip_dns——
f5big-ip_domain_name_system>= 13.1.0 < 13.1.3.413.1.3.4
f5big-ip_domain_name_system>= 14.1.0 < 14.1.2.414.1.2.4
f5big-ip_domain_name_system>= 15.0.0 < 15.1.115.1.1
f5big-ip_fps——