Skip to content
OpenAdvisories
Unscored CVE-2020-5926 EUVD-2020-27080GHSA-8534-5wx9-rc44

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, a BIG-IP virtual server with a Session Initiation Protocol (SIP) …

Published Aug 26, 2020 · Updated Aug 4, 2024 · Assigned by f5

Description

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, a BIG-IP virtual server with a Session Initiation Protocol (SIP) ALG profile, parsing SIP messages that contain a multi-part MIME payload with certain boundary strings can cause TMM to free memory to the wrong cache.

Affected products

VendorProductAffectedFixed
— BIG-IP 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6 —

References