CVE-2020-5875

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 14.1.0 through 14.1.2.3 F5 BIG-IP versions 15.0.0 through 15.0.1

Description The Traffic Management Microkernel (TMM) may generate a core file and restart under certain conditions while processing SSL traffic with an HTTP/2 full proxy.

Recommendations For F5 BIG-IP versions 14.1.0 through 14.1.2.3, update to a version that fixes the issue. For F5 BIG-IP versions 15.0.0 through 15.0.1, update to a version that fixes the issue. As a temporary workaround, consider restricting the use of HTTP/2 full proxy to minimize the risk of exploitation.