Denial of Service in BIG-IP DNS by F5 Networks
CVE-2020-27717

7.5HIGH

Key Information:

Vendor

F5
Status
Big-ip Dns
Vendor
CVE Published:
24 December 2020

What is CVE-2020-27717?

On specific versions of BIG-IP DNS software, a sequence of unresolved DNS requests can lead to a crash of the Traffic Management Microkernel (TMM), resulting in unintended restarts and possible generation of core files. This behavior can disrupt services and has implications for system availability, making it crucial for users to evaluate their configurations and apply necessary mitigation measures.

Affected Version(s)

BIG-IP DNS 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2

References

https://support.f5.com/csp/article/K43850230
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.