CVE-2020-5871
N/A
N/A
Summary
On BIG-IP 14.1.0-14.1.2.3, undisclosed requests can lead to a denial of service (DoS) when sent to BIG-IP HTTP/2 virtual servers. The problem can occur when ciphers, which have been blacklisted by the HTTP/2 RFC, are used on backend servers. This is a data-plane issue. There is no control-plane exposure.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | BIG-IP | 14.1.0-14.1.2.3 | affected |
Weaknesses
- DoS
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.