1. Home
  2. CVE Database
  3. CVE-2020-5921
HIGH · 7.5

CVE-2020-5921

in BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, Syn flood causes large number of MCPD context messages destined to secondar...

Vulnerability Description

in BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, Syn flood causes large number of MCPD context messages destined to secondary blades consuming memory leading to MCPD failure. This issue affects only VIPRION hosts with two or more blades installed. Single-blade VIPRION hosts are not affected.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
F5Big-Ip Access Policy Manager>= 12.1.0, < 12.1.5.2
F5Big-Ip Advanced Firewall Manager>= 12.1.0, < 12.1.5.2
F5Big-Ip Analytics>= 12.1.0, < 12.1.5.2
F5Big-Ip Application Acceleration Manager>= 12.1.0, < 12.1.5.2
F5Big-Ip Application Security Manager>= 12.1.0, < 12.1.5.2
F5Big-Ip Domain Name System>= 12.1.0, < 12.1.5.2
F5Big-Ip Fraud Protection Service>= 12.1.0, < 12.1.5.2
F5Big-Ip Global Traffic Manager>= 12.1.0, < 12.1.5.2
F5Big-Ip Link Controller>= 12.1.0, < 12.1.5.2
F5Big-Ip Local Traffic Manager>= 12.1.0, < 12.1.5.2
F5Big-Ip Policy Enforcement Manager>= 12.1.0, < 12.1.5.2

References

FAQ

What is CVE-2020-5921?

CVE-2020-5921 is a vulnerability with a CVSS score of 7.5 (HIGH). in BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, Syn flood causes large number of MCPD context messages destined to secondar...

How severe is CVE-2020-5921?

CVE-2020-5921 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-5921?

Check the references section above for vendor advisories and patch information. Affected products include: F5 Big-Ip Access Policy Manager, F5 Big-Ip Advanced Firewall Manager, F5 Big-Ip Analytics, F5 Big-Ip Application Acceleration Manager, F5 Big-Ip Application Security Manager.