CVE Vulnerabilities

CVE-2020-5881

Published: Apr 30, 2020 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when the BIG-IP Virtual Edition (VE) is configured with VLAN groups and there are devices configured with OSPF connected to it, the Network Device Abstraction Layer (NDAL) Interfaces can lock up and in turn disrupting the communication between the mcpd and tmm processes.

Affected Software

NameVendorStart VersionEnd Version
Big-ip_access_policy_managerF513.1.0 (including)13.1.3.3 (including)
Big-ip_access_policy_managerF514.1.0 (including)14.1.2.3 (including)
Big-ip_access_policy_managerF515.0.0 (including)15.1.0.1 (including)

References