CVE-2020-5926

2020-08-2615:43:13

www.cve.org

big-ip

memory vulnerability

sip alg

EPSS

0.001

Percentile

41.5%

JSON

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, a BIG-IP virtual server with a Session Initiation Protocol (SIP) ALG profile, parsing SIP messages that contain a multi-part MIME payload with certain boundary strings can cause TMM to free memory to the wrong cache.

CNA Affected

[
  {
    "product": "BIG-IP",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6"
      }
    ]
  }
]

References

support.f5.com/csp/article/K42830212

EPSS

0.001

Percentile

41.5%

JSON

Related for CVELIST:CVE-2020-5926