CVE-2020-5881

7.5HIGH

Key Information:

Vendor
F5
Status
Big-ip Ve
Vendor
CVE Published:
30 April 2020

Summary

On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when the BIG-IP Virtual Edition (VE) is configured with VLAN groups and there are devices configured with OSPF connected to it, the Network Device Abstraction Layer (NDAL) Interfaces can lock up and in turn disrupting the communication between the mcpd and tmm processes.

Affected Version(s)

BIG-IP VE 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3

References

https://support.f5.com/csp/article/K03386032
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.