CVE-2020-5883
Published Apr 30, 2020
Last updated 3 years ago
Overview
- Description
- On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, when a virtual server is configured with HTTP explicit proxy and has an attached HTTP_PROXY_REQUEST iRule, POST requests sent to the virtual server cause an xdata memory leak.
- Source
- f5sirt@f5.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 7.5
- Impact score
- 3.6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity
- HIGH
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- CWE-401
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7174510-CC8F-4F4D-9706-C7CBB99D7172",
"versionEndIncluding": "13.1.3.1",
"versionStartIncluding": "13.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5AF91B1E-6739-47B0-83AC-62475648FA9F",
"versionEndIncluding": "14.0.1",
"versionStartIncluding": "14.0.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07FC84CA-3E12-43FB-ADBD-7B988DEF3A97",
"versionEndIncluding": "14.1.2.3",
"versionStartIncluding": "14.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A2FA3A9-89F3-4F39-B076-7FEF784D0329",
"versionEndIncluding": "15.0.1.3",
"versionStartIncluding": "15.0.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2BFAF3E-5E01-4EBF-AC8C-92DDFF38EB8F",
"versionEndIncluding": "13.1.3.1",
"versionStartIncluding": "13.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EAD6198E-F90A-48CB-B02B-5770B59ACE12",
"versionEndIncluding": "14.0.1",
"versionStartIncluding": "14.0.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BEE162F-A016-4EDB-A7D1-1F87945EED3E",
"versionEndIncluding": "14.1.2.3",
"versionStartIncluding": "14.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0CC481C-0956-4949-9C8C-450149C25C31",
"versionEndIncluding": "15.0.1.3",
"versionStartIncluding": "15.0.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A8F7E27-37D3-4317-A418-ED20FCFA6544",
"versionEndIncluding": "13.1.3.1",
"versionStartIncluding": "13.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D30E2226-F7BD-40C4-A4C8-609C2294130B",
"versionEndIncluding": "14.0.1",
"versionStartIncluding": "14.0.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "877B6375-3BC0-40C5-B13C-E435036D98CA",
"versionEndIncluding": "14.1.2.3",
"versionStartIncluding": "14.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D25D2A81-8571-4452-BA6B-4A9A409849CC",
"versionEndIncluding": "15.0.1.3",
"versionStartIncluding": "15.0.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C13DFF4A-CD7C-4B9A-AD90-79E29FC1D117",
"versionEndIncluding": "13.1.3.1",
"versionStartIncluding": "13.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05A3E73A-9B60-4568-91E1-83AEFD4A6B21",
"versionEndIncluding": "14.0.1",
"versionStartIncluding": "14.0.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "547D6BFB-5DE8-4027-88EF-0349400494D1",
"versionEndIncluding": "14.1.2.3",
"versionStartIncluding": "14.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "931730C6-DAC7-46AA-8EC6-72BD3BD9B6F9",
"versionEndIncluding": "15.0.1.3",
"versionStartIncluding": "15.0.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "241F94B5-C01C-4F62-85D9-EAC3C71845BC",
"versionEndIncluding": "13.1.3.1",
"versionStartIncluding": "13.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31A36F31-1453-4907-8621-61E75F285734",
"versionEndIncluding": "14.0.1",
"versionStartIncluding": "14.0.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7881BC1C-1B10-43D4-AD4A-545D7C7C4160",
"versionEndIncluding": "14.1.2.3",
"versionStartIncluding": "14.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51AD832B-5FAB-49CE-AF22-746BDD62E933",
"versionEndIncluding": "15.0.1.3",
"versionStartIncluding": "15.0.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "48A3DFA8-2DB0-4F65-AE6F-BB02CF42EE7E",
"versionEndIncluding": "13.1.3.1",
"versionStartIncluding": "13.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A60A7D69-96CA-4C88-8D65-220B93C56980",
"versionEndIncluding": "14.0.1",
"versionStartIncluding": "14.0.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6DFBD76-20DB-497D-B407-1EAA5555B49F",
"versionEndIncluding": "14.1.2.3",
"versionStartIncluding": "14.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ECCA9286-C22B-4685-A0E0-A8A678920A16",
"versionEndIncluding": "15.0.1.3",
"versionStartIncluding": "15.0.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8226B91-CF43-4371-B140-9214F559E46F",
"versionEndIncluding": "13.1.3.1",
"versionStartIncluding": "13.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4E4F0E4-BCB3-4E29-B011-7594452AD09C",
"versionEndIncluding": "14.0.1",
"versionStartIncluding": "14.0.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FFDA4E14-477A-4B0C-B603-7D53F13A387D",
"versionEndIncluding": "14.1.2.3",
"versionStartIncluding": "14.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "75E90FC5-2846-4306-B3F1-0EC86967D7E1",
"versionEndIncluding": "15.0.1.3",
"versionStartIncluding": "15.0.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC6FB035-B2F6-452B-A407-85535B07D897",
"versionEndIncluding": "13.1.3.1",
"versionStartIncluding": "13.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDD109E8-E153-4C4C-9328-98839E90252D",
"versionEndIncluding": "14.0.1",
"versionStartIncluding": "14.0.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA369F2E-2E17-4BEA-B894-14656D977B93",
"versionEndIncluding": "14.1.2.3",
"versionStartIncluding": "14.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "549D7EB5-C514-44CA-8760-7A464369048B",
"versionEndIncluding": "15.0.1.3",
"versionStartIncluding": "15.0.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76D757F4-B333-4EFB-87CE-1F14BD1B1734",
"versionEndIncluding": "13.1.3.1",
"versionStartIncluding": "13.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2D83E3E-A360-4547-938D-A8D895CBD6CE",
"versionEndIncluding": "14.0.1",
"versionStartIncluding": "14.0.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E0B6F31-DC75-49C9-9E59-EF1CD68B1B3D",
"versionEndIncluding": "14.1.2.3",
"versionStartIncluding": "14.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA41B182-C466-48E8-A45D-22E0444557F9",
"versionEndIncluding": "15.0.1.3",
"versionStartIncluding": "15.0.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1886D50C-6B79-4A7F-887B-08093F0C4894",
"versionEndIncluding": "13.1.3.1",
"versionStartIncluding": "13.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "439E22C8-A863-4E4A-A7E6-330608C9A982",
"versionEndIncluding": "14.0.1",
"versionStartIncluding": "14.0.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D806FBF-8E6D-412C-B547-92AD9294B639",
"versionEndIncluding": "14.1.2.3",
"versionStartIncluding": "14.1.0"
},
{
"criteria": "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19079FFF-32A8-4109-BFA8-787532451731",
"versionEndIncluding": "15.0.1.3",
"versionStartIncluding": "15.0.0"
}
],
"operator": "OR"
}
]
}
]