PT-2020-18773

CVE-2020-5872

·

تاريخ النشر

2020-04-30

·

تاريخ التحديث

2020-05-06

الوصف من

CVSS 3.1
7.5
عالية
المقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 12.1.0 through 12.1.4.1 F5 BIG-IP versions 13.1.0 through 13.1.3.1 F5 BIG-IP versions 14.0.0 through 14.0.1 F5 BIG-IP versions 14.1.0 through 14.1.2.3
Description The issue occurs when processing TLS traffic with hardware cryptographic acceleration enabled on platforms with Intel QAT hardware. This can cause the Traffic Management Microkernel (TMM) to stop responding, resulting in a failover event.
Recommendations For versions 12.1.0 through 12.1.4.1, consider disabling hardware cryptographic acceleration on platforms with Intel QAT hardware until a patch is available. For versions 13.1.0 through 13.1.3.1, consider disabling hardware cryptographic acceleration on platforms with Intel QAT hardware until a patch is available. For versions 14.0.0 through 14.0.1, consider disabling hardware cryptographic acceleration on platforms with Intel QAT hardware until a patch is available. For versions 14.1.0 through 14.1.2.3, consider disabling hardware cryptographic acceleration on platforms with Intel QAT hardware until a patch is available.
قابلية الاستغلال
إصلاح
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾