What is CVE-2020-27713?

CVE-2020-27713 is a high-severity vulnerability in F5 Big-Ip Advanced Firewall Manager, classified under Missing Release of Memory after Effective Lifetime. CVSS score: 7.5/10. Published 2020-12-11.

How severe is CVE-2020-27713?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in F5 Big-Ip Advanced Firewall Manager

CVE-2020-27713

In certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied to a virtual server and the BIG-IP system receives a request with specific characteristics, the connection is reset and the Traffic Management Microkernel (TMM) leaks memory.

EPSS: 0.013 (66.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

F5 Big-ip_advanced_firewall_manager — versions 13.1.3.4
N/a Big-ip — versions 13.1.3.4

Weakness classification (CWE)

CWE-401 — Missing Release of Memory after Effective Lifetime

References

f5sirt@f5.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-27713?: CVE-2020-27713 is a high-severity vulnerability in F5 Big-Ip Advanced Firewall Manager, classified under Missing Release of Memory after Effective Lifetime. CVSS score: 7.5/10. Published 2020-12-11.
How severe is CVE-2020-27713?: High severity. CVSS v3 base score is 7.5 out of 10.