K53590702 : BIG-IP engineering hotfix TMM vulnerability CVE-2020-5852

Security Advisory Description

Undisclosed traffic patterns received may cause a disruption of service to the Traffic Management Microkernel (TMM). This vulnerability affects TMM through a virtual server configured with a FastL4 profile. Traffic processing is disrupted while TMM restarts. (CVE-2020-5852)

Impact

A remote attacker may be able to cause a BIG-IP system to produce a core file, disrupting the flow of traffic and causing a failover to a standby system, if configured. You may observe a notice panic: Assertion “l3hdr set” failed error message in the** /var/log/ltm** file when TMM produces a core file and restarts.

Important: This vulnerability impacts only BIG-IP engineering hotfixes obtained from F5 Support. For the list of affected versions, refer to the table in the following section. To verify if you are running an affected version from this list, perform the procedure in theSecurity Advisory Recommended Actions section. This vulnerability does not affect any of the BIG-IP major, minor, maintenance, or point releases obtained from F5 Downloads.