CVE-2020-27715

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 14.1.0 through 14.1.3 F5 BIG-IP versions 15.1.0 through 15.1.0.5

Description A crafted TLS request to the BIG-IP management interface via port 443 can cause high (~100%) CPU utilization by the httpd daemon.

Recommendations For F5 BIG-IP versions 14.1.0 through 14.1.3, consider restricting access to the management interface to minimize the risk of exploitation. For F5 BIG-IP versions 15.1.0 through 15.1.0.5, consider restricting access to the management interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.