2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2020-5941" ,
"sourceIdentifier" : "f5sirt@f5.com" ,
"published" : "2020-11-05T20:15:17.613" ,
"lastModified" : "2020-11-16T16:54:09.137" ,
"vulnStatus" : "Analyzed" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "On BIG-IP versions 16.0.0-16.0.0.1 and 15.1.0-15.1.0.5, using the RESOLV::lookup command within an iRule may cause the Traffic Management Microkernel (TMM) to generate a core file and restart. This issue occurs when data exceeding the maximum limit of a hostname passes to the RESOLV::lookup command."
} ,
{
"lang" : "es" ,
"value" : "En BIG-IP versiones 16.0.0-16.0.0.1 y 15.1.0-15.1.0.5, usando el comando RESOLV::lookup dentro de una iRule puede causar que Traffic Management Microkernel (TMM) genere un archivo central y se reinicie. Este problema ocurre cuando los datos que exceden el l\u00edmite m\u00e1ximo de un nombre de host pasan al comando RESOLV::lookup"
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 3.6
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P" ,
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "PARTIAL" ,
"baseScore" : 5.0
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-noinfo"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.1.0" ,
"versionEndExcluding" : "15.1.1" ,
"matchCriteriaId" : "C0F7F86F-EB88-44C8-83A4-2FC48CF39B73"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "16.0.0" ,
"versionEndExcluding" : "16.0.1" ,
"matchCriteriaId" : "3F3F98DD-C142-4030-AD11-A3129D5FFEA9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.1.0" ,
"versionEndExcluding" : "15.1.1" ,
"matchCriteriaId" : "60500DD5-0163-40B8-961B-64E1634B456F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "16.0.0" ,
"versionEndExcluding" : "16.0.1" ,
"matchCriteriaId" : "1247022A-F95F-4DF6-87AC-2E6757B01DC3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.1.0" ,
"versionEndExcluding" : "15.1.1" ,
"matchCriteriaId" : "4B62CF9F-F861-4AA3-9B2C-EDDA465BA06A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "16.0.0" ,
"versionEndExcluding" : "16.0.1" ,
"matchCriteriaId" : "F491CF7C-EC9A-4413-9B84-459FE83E0AF5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.1.0" ,
"versionEndExcluding" : "15.1.1" ,
"matchCriteriaId" : "4770A77A-13EF-4E35-B006-48018F617FAA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "16.0.0" ,
"versionEndExcluding" : "16.0.1" ,
"matchCriteriaId" : "D54A135F-CD1E-41AD-82C3-F15A21AA87BE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.1.0" ,
"versionEndExcluding" : "15.1.1" ,
"matchCriteriaId" : "FDD7AFF9-61D8-4D1B-BAD6-F74AD0CD364E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "16.0.0" ,
"versionEndExcluding" : "16.0.1" ,
"matchCriteriaId" : "C3B360C4-C9E2-4889-ADD5-3482E69BA8E7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.1.0" ,
"versionEndExcluding" : "15.1.1" ,
"matchCriteriaId" : "61441082-FDA0-485E-B945-E6216DCCED43"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "16.0.0" ,
"versionEndExcluding" : "16.0.1" ,
"matchCriteriaId" : "B7466098-C689-4E4B-879F-0433A020FDBC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.1.0" ,
"versionEndExcluding" : "15.1.1" ,
"matchCriteriaId" : "DAB5474D-11C7-4CA1-9386-8F12FD95CCB6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "16.0.0" ,
"versionEndExcluding" : "16.0.1" ,
"matchCriteriaId" : "574397F4-0234-48D3-B024-D7963A41E21C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.1.0" ,
"versionEndExcluding" : "15.1.1" ,
"matchCriteriaId" : "B5F5C326-1BCE-47FC-A334-B485C755AAE6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "16.0.0" ,
"versionEndExcluding" : "16.0.1" ,
"matchCriteriaId" : "EB7047B3-A248-424C-98D8-A0DD99A86F50"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.1.0" ,
"versionEndExcluding" : "15.1.1" ,
"matchCriteriaId" : "0E48624E-6D03-423A-9232-6847E4A0AAFB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "16.0.0" ,
"versionEndExcluding" : "16.0.1" ,
"matchCriteriaId" : "15439AAC-1535-4087-9170-C885716736F4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.1.0" ,
"versionEndExcluding" : "15.1.1" ,
"matchCriteriaId" : "FD2B708E-78D3-4016-9176-C364CBE20DA8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "16.0.0" ,
"versionEndExcluding" : "16.0.1" ,
"matchCriteriaId" : "4F9D19B2-1D89-4917-A82E-289EDE52C68F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "15.1.0" ,
"versionEndExcluding" : "15.1.1" ,
"matchCriteriaId" : "240E6558-C486-4FEB-A7AC-CCB3692D4331"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "16.0.0" ,
"versionEndExcluding" : "16.0.1" ,
"matchCriteriaId" : "E0319299-FCCE-4B8F-8DB5-83AF0C3D68D5"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://support.f5.com/csp/article/K03125360" ,
"source" : "f5sirt@f5.com" ,
"tags" : [
"Vendor Advisory"
]
}
]
}
