CVE-2020-27714 Denial of service in BIG-IP AFM
Attackers can cause a TMM restart and denial of service on BIG-IP AFM by sending non-TCP traffic to a FastL4 virtual server with specific Protocol Inspection Profile settings.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-27714?
CVE-2020-27714 is a high-severity denial of service vulnerability in F5 Big-Ip Advanced Firewall Manager, published on 24 Dec 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
On the BIG-IP AFM version 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5, when a Protocol Inspection Profile is attached to a FastL4 virtual server with the protocol field configured to either Other or All Protocols, the TMM may experience a restart if the profile processes non-TCP traffic.
Which versions are affected by CVE-2020-27714?
It affects 1 product.
Products include F5 Big-Ip Advanced Firewall Manager.
How do I fix CVE-2020-27714?
No fix has been published for CVE-2020-27714 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2020-27714 being exploited?
There is no known exploitation of CVE-2020-27714 in the wild and no public exploit code.
Other vulnerabilities in F5 Big-Ip Advanced Firewall Manager
Sources
Also known as GHSA-7jmj-qp68-j8hc.